prepare encPMS as soon as the cert is available
use browser aes decryption by default
rename prepare_pms() to start_audit()
removing extra communication round by sending cs_cr_sr_hmacms_verifymd5sha
PRF must return bytelength based on CS, not a fixed value
README: update realy short version