Bypass gcc optimization
Double check for crypto_auth_verify()
Remove scryptx() compatibility functions
Do not pass -fPIC on Windows. Add msys as a host_os value to detect Windows as well.
Keep IA-32 asm on MingW/Cygwin, check for Windows during the x86-64 test.
Rephrase
Document the maximum number of bytes for crypto_stream_aes256estream*()
abort() if these functions are misused.
Remove aes256estream.
AES-256 will be reintroduced, but not until we have a bitsliced implementation.
Implement ed25519 -> curve25519 keys conversion
Add sodium_malloc(), sodium_allocarray(), sodium_calloc() and sodium_free()

ptr = sodium_malloc(size) returns a pointer from which exactly "size" bytes
can be accessed. If the requested size is a multiple of 128 (the highest common
cache line size), the pointer is likely to be aligned to 128 bytes as
well.

The region is immediately followed by a guard page.
As a result, any attempt to access a memory location after ptr[size - 1] will
immediately trigger a segmentation fault.

The allocated region is mlock()ed and filled with garbage.

Another guard page, as well as a canary are placed before the returned
pointer.

The canary is checked by sodium_free(); as a result, altering data right
before ptr is likely to cause sodium_free() to kill the process.

sodium_free() munlock() the region and fills it with zeros before
actually calling free().