Added note about nulls mapping to '0'
Changed vouch design to make it more secure

* See http://codesinchaos.wordpress.com/2012/09/09/curvecp-1
* Vouch is now Box [C',S](C->S')