update debian changelog
add rand.stir, which polls system entropy in the most robust way possible, because OpenSSL only knows how to use /dev/urandom