Readded lucky thirteen code, and added some early failures documented in the same paper.
Let the data size be a prime number, so it doesn't match any block size of anything.
Protocols.HTTP.Server.SSLPort: Support ECDSA certs.

set_key() now knows about ECDSA private keys.
Protocols.HTTP.Server.SSLPort: Default to all cert types.

set_default_keycert() now creates and adds one certificate of each
of RSA, DSA/DSS and ECDSA.
Updated to tzdata2014b.
Allow bitstring to be casted to int.
Don't add the packet data to the hmac header, to avoid creating an intermediate string.
Name changes. hash to hash_packet and hash_raw to hash.
Some more renaming. Now all MAC objects have the same API. hash does HMAC, hash_packet does HMAC with header and hash_raw does hash with the underlying hash algorithm.
Change lucky thirteen mitigation to use hash instead of full HMAC. This is a constant reduction in time, so the difference between correct and non-correct padding is the same.