cvs update to 2014-07-03; keep conflicts
resolve & compile
fuzz signature verification
unit test for nested certificates
fix tests for renamed err.h and key.h

add tests for ed25519 and new-format keys

(this matches what is proposed for upstreaming)
add PROTOCOL.key
regen testdata and add missing files
missing explicit_bzero in kexc25519, and newkeys
sync cvs to 2014-07-04
remove compress.[ch]