Move .proto schema to the pb package.
Shuffle the recipients in the header.
Rename generateHeader.
Switch to using SHA-512 for message signatures.
Use HKDF-SHA-512 instead of SHA-256.
Added some real docs, including threat model.