qualifier in asm definitions as it prevents compiler from moving
the instruction(s) during optimization pass.

temporary BIGNUMs. BN_CTX still uses a fixed number of BIGNUMs, but
the BN_CTX implementation could now easily be changed.

OpenSSL_add_all_algorithms(). Move these into
separate files so they work properly.

Add new -notext option to 'ca', -pubkey option to spkac.

Remove some "WTF??" casts from applications.

Fixes to keep VC++ happy and avoid warnings.

Docs tidy.

Submitted by: Martin Kraemer <martin.kraemer@mch.sni.de>

"Make DSA_generate_parameters faster").

(including another problem in the s3_srvr.c state machine).

New -pkcs12 option to CA.pl.
Document CA.pl script.
Initialise and free up the extra DH fields
(nothing uses them yet though).

New function BN_pseudo_rand().
Use BN_prime_checks_size(BN_num_bits(w)) rounds of Miller-Rabin when
generating DSA primes (why not use BN_is_prime()?)

Clean up bn_mont.c.

Tidy up CRYPTO_EX_DATA structures.

Update docs.

Add new program dhparam and update docs.

Gets Lutz Jaenicke's name right this time :-)

Apologies to both concerned.

minor changes.

Docs haven't been added at this stage. They are probably
best included in the 'ciphers' program docs.

serial numbers.

as a shared library without RSA.  Use #ifndef NO_SSL2 instead of
NO_RSA in ssl/s2*.c.

Submitted by: Kris Kennaway <kris@hub.freebsd.org>
Modified by Ulf Möller

are not guaranteed to be unpredictable.

returns int (1 = ok, 0 = not seeded). New function RAND_add() is the
same as RAND_seed() but takes an estimate of the entropy as an additional
argument.

Primes p where (p-1)/2 is prime too are called "safe", not "strong".

Suggested by Bodo.