Fixed some errors in comments.
Added new 64-bit implementations of Curve25519 and P-256.
Fixed endianness in Curve25519 implementation (no consequence on security). Also added new Curve25519 code for 64-bit platforms.
Added support code for RSA and EC key encoding (including reconstruction of all public and private key elements from the private key structure), with raw and PKCS#8 formats, both in DER and PEM.
Made headers compatible with C++.
Added AES+GHASH implementation using AES-NI opcodes; also ARM-Thumb assembly for faster Montgomery multiplication on Cortex-M0+. Added selection functions for "default" implementations.
Added optimised implementation of P-256 that uses 32->64 multiplications (MUL31).
Two new Curve25519 implementations (generic "i31" code, and optimised code with MUL31).
Activated Curve25519 support for ECDHE cipher suites.
New implementation of Curve25519 (using multiplications of words of 15 bits or so, should be much faster on Cortex M0).
New basic implementation of Curve25519 (generic i15 code, experimental).
More optimisations for EC P-256 "i15" (specialised squaring function, mixed coordinates addition with a 4-bit window when the base point is the conventional generator).
New "i15" implementation of big integers (faster, and constant-time, on ARM Cortex M0/M0+); imported into EC, ECDSA, RSA.
New experimental EC implementation (P-256, only 32-bit multiplications, meant for Cortex-M0/M0+).
More API documentation (Doxygen format) for EC code.
Initial import.