https://timothyclark.uk/publication/bcs/practical-security/65-4/