mod_p224 now endian-neutral
mod_p224 now working with 8-bit and 16-bit ints
Document and slightly reorganize mod_pXXX
Add mod_p256
Add mod_p384
Make NIST curves optimisation an option
Make mod_p{224,256,384] a bit faster

Speedup is roughly 25%, giving a 6% speedup on ecp_mul() for these curves.
Reorganize code in ecp.c
Use less memory in fix_negative()
Add a comment about modules coupling
Rename GCM test suites to AES-GCM
Make GCM tests accept any cipher, not just AES
Add Camellia-GCM test vectors

https://tools.ietf.org/html/draft-kato-ipsec-camellia-gcm-03#section-4
Fix GCM dependencies
Add Camellia-GCM to th cipher layer
gcm_selftest depends on AES
Add tests for AES-{192,256}-GCM in cipher layer
Add failing test vectors for Camellia-GCM auth
Add test vectors for Camellia-GCM via cipher layer
Cipher layer: check iv_len more carefully