Made m64 implementations of elliptic curves the default (when available).
Made ec_c25519_m62 implementation the default on supported architectures.
Added POWER8 implementation for AES/CTR+CBC-MAC (for CCM and EAX modes).
Added support code for RSA and EC key encoding (including reconstruction of all public and private key elements from the private key structure), with raw and PKCS#8 formats, both in DER and PEM.
Added support for CCM and CCM_8 cipher suites.
Added name for new ChaCha20 implementation.
New "i62" code for big integers with 64x64->128 opcodes; also improved "i31" modular exponentiation.
Added "ctmulq" implementation of Poly1305 (using 64->128 multiplications when available).
New AES and GHASH implementations using POWER8 crypto opcodes.
Added AES+GHASH implementation using AES-NI opcodes; also ARM-Thumb assembly for faster Montgomery multiplication on Cortex-M0+. Added selection functions for "default" implementations.
Activated Curve25519 support for ECDHE cipher suites.
Fixed description of TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 in the command-line tool.
Added ChaCha20+Poly1305 support (stand-alone, cipher suites).
Added support for client certificates (both client-side and server-side, but still missing an API for extracting the client identity from the certificate).
Improved parsing of some integer arguments (sizes).
Removed unreachable code.
Initial import.