Add HMAC-SHA512 to hash
Generalize version bytes
CWallet::TopUpKeyPool() takes optional pool size argument

Also, GetKeyPoolSize() now returns an accurate type, unsigned int.
RPC: keypoolrefill gains optional size parameter
BIP32 derivation implementation
BIP32 test vectors
Compile into build_test when creating bitcoin-qt_test
More unit tests for NUMEQUAL
Make RPC password resistant to timing attacks

Fixes issue#2838; this is a tweaked version of pull#2845 that
should not leak the length of the password and is more generic,
in case we run into other situations where we need
timing-attack-resistant comparisons.
Use HandleError() consistently to handle leveldb errors
Removed duplicate files.

Left behind after the change to Markdown.
Merge pull request #2899 from super3/master

Removed duplicate /doc files.
Merge pull request #2877 from gavinandresen/qt_unittest_makefile

Compile into build_test when creating bitcoin-qt_test
Merge pull request #2776 from jgarzik/keypoolsize

RPC: keypoolrefill now permits optional size parameter, to bump keypool
Clarified the listsinceblock help test
Specifically, the fact that the command
relates to wallet transactions.
Fix non-standard disconnected transactions causing mempool orphans
Mempool consistency check
Only create signatures with even S, and verification mode to check.

To fix a minor malleability found by Sergio Lerner (reported here:
https://bitcointalk.org/index.php?topic=8392.msg1245898#msg1245898)

The problem is that if (R,S) is a valid ECDSA signature for a given
message and public key, (R,-S) is also valid. Modulo N (the order
of the secp256k1 curve), this means that both (R,S) and (R,N-S) are
valid. Given that N is odd, S and N-S have a different lowest bit.
We solve the problem by forcing signatures to have an even S value,
excluding one of the alternatives.

This commit just changes the signing code to always produce even S
values, and adds a verification mode to check it. This code is not
enabled anywhere yet. Existing tests in key_tests.cpp verify that
the produced signatures are still valid.
Merge pull request #2829 from sipa/bip32

BIP 32 derivation + test vectors
Merge pull request #2131 from sipa/evens

Only create signatures with even S, and verification mode to check.