Pretty much what @alex said. Maybe OpenSSL is super careful with the static buffer but I didn't investigate the implementation.