Exactly. Since I never got a reply from the OpenSSL developers about my assumptions, I need to make sure about them in code. A bit more runtime, but better play it safe.