Mention that SHA2 is vulnerable to length extension attacks.
More warnings about aes256estream
Mention that edwards25519sha512batch() should not be used in new projects.
Enable Coverity+Travis