> But I despise having to go to the > memory manager for something like a BN_CTX that could live on the stack. Sorry, but that's the way it's gonna be. There are plenty of things to despise in OpenSSL, I wouldn't have put "must allocate structures from the heap" anywhere near the top of my list :)