The space saving is >5x on x86_64 at ~40% performance penalty. Reviewed-by: Rich Salz <rsalz@openssl.org>