The OpenSSL/LibreSSL shuffle