Verify that the server did not send any extension that the client didn't
offer. Previously the client only checked a couple of special cases.
Bump version
Have TLS_Data_Reader decoding errors include the actual msg type name
Compile fix
Deindent to avoid github mangling
Use 20 Miller-Rabin iterations regardless of the size of the integer. This
provides a much better worst-case error bound. Also take the nonce from anywhere
in the usable range rather than limiting the bit size.
Use MADV_DONTDUMP on Linux, equiv to MAP_NOCORE on BSD
Doc fix