https://ma.tt/2013/08/harder-slower-less-secure/