A tale of software maintenance: OpenSSL and EVP_CHECK_DES_KEY