What could be better than to refer to the RFC that defines it? Reviewed-by: Stephen Henson <steve@openssl.org>