return BAD_RECORD_MAC on decryption and padding errors:
actually check CBC padding! and return BAD_RECORD_MAC
instead of DECRYPTION_FAILED
compute mac always to prevent timing attacks
actually no need for using random, just use ciphertext
TLS1.1 RFC
style (preparing for explicit IV in CBC mode for >= TLS1.1)
instead of pairs denoting the protocol version, use a sum type
style
force flush on stdout (by calling cstruct.hexdump)
support for TLS1.1 (configuration should be factored out here)
tls1.2 rfc
comments on potential breaks while discussing code with @abeaumont
remove compare, because sum types are ordered; thanks @pqwy
unbreak stream cipher && TLS_1_1 (block size is not defined here)
flush stdout, do not hexdump (thanks @pqwy)
comment on timing problem here
style
Merge pull request #30 from mirleft/fixes

a winrar is you