use perfect forward secrecy by default
fix missing malloc on linux