RT 487.  Mention that generated primes are "at least" B<bits> long.
bn/asm/rsaz-avx2.pl: fix occasional failures.