use 32 bytes instead of 24 for seed material from ThreadedSeedGenerator
after seeding, pointlessly threw away the first few bytes.  Removed.
use CryptoApiRandomGenerator in addition to other entropy sources
SecureRandom ctor: given this is a sha1Generator, seed with 20 bytes instead of 8
GetInstance() returns a seeded instance. If you want an unseeded instance, you must use the unseeded ctor in which you supply your own generator
In SecureRandom, the usage of ReversedWindowGenerator only reordered the output of sha256Generator. It added computation overhead and zero cryptographic value.  Removed.
Cleanup obsolete code warnings
Add methods to give readable text for alerts
Initial implementation of draft-ietf-tls-session-hash-01
Extended master secret uses a different label in PRF
Improve sorting for SETs
Refactor redundant blocks
Support no-password operation (as best we can)
Formatting
Minor improvements to MaxFragmentLength handling
Small refactoring
Constants and support functions for draft-ietf-tls-negotiated-ff-dhe-01
Refactoring
Update comments now that encrypt-then-MAC is out of draft (RFC 7366)
Early code-point assignment for draft-ietf-tls-session-hash
Port of GenericSIgner fix from Java