Duplicate cipher chains before populating with keys, etc

 * If this is not done, hidden volume protection doesn't work
   as the keys stored in the cipher chain match those of the
   hidden volume instead of the outer volume.

 * While on it, change the IV gen to plain64 instead of plain,
   which is what TrueCrypt does nowadays.

Fixes #28
Makefile cleanup, CHANGELOG update