The original code breaks at least in optimized build on Fedora x86,
because there nBits for 256 is computed as 9, not 8.

Change-Id: Ib157c415bc9e231bf7fd544349810e6bc83c8fcc