Add shell.nix

Signed-off-by: Austin Seipp <austin@well-typed.com>
Comments only

Signed-off-by: Austin Seipp <austin@well-typed.com>
Set -D[N]DEBUG properly

Signed-off-by: Austin Seipp <austin@well-typed.com>
Sign BLAKE2b message digests

This implements a final change I had lingering and forgotten, which was
to sign the hash of the message and not the message itself. As a bonus
this is not only simpler, it saves a few malloc() calls too.

Signed-off-by: Austin Seipp <austin@well-typed.com>
CompCert fixes

Signed-off-by: Austin Seipp <austin@well-typed.com>
Update .gitignore

Signed-off-by: Austin Seipp <austin@well-typed.com>
Add changelog

Signed-off-by: Austin Seipp <austin@well-typed.com>
Cosmetic change

Signed-off-by: Austin Seipp <austin@well-typed.com>