Prevent oracle attacks in the legacy protocol (CVE-2018-16737, CVE-2018-16738)