generate twice the random for PKCS padding, instead of mapping all
0xff and 0x00 to 0x01 (which means 0x01 is twice as probable as all
other bytes)
style
do decryption and unpadding also without data-dependent branches
rewrote once more for code clarity
Merge pull request #47 from mirleft/fixxx

Fixxx