Merge pull request #791 from reaperhulk/098e-fix

RHEL 5's inaccurate OPENSSL_VERSION_NUMBER is a real pain
add MGF1 class, docs, tests
change MAX_LENGTH to be an object rather than a byte string
make attributes of MGF1 private since that's our general convention
document MAX_LENGTH
add RSA PSS verification support