Source: https://nvlpubs.nist.gov/nistpubs/ir/2015/nist.ir.8018.pdf