remove setkey and encrypt interfaces. they are useless and dangerous.
ok deraadt naddy
add siphash from the kernel to libc
delete obsolete sunos cfree function. ok deraadt millert naddy
don't do silly (and slow) one byte reads in unbuffered mode.
from enh at google
remove cfree from documentation
delete documentation for deleted DES interfaces
tweak recommendation to use arc4random_buf
more libc, less kernel documentation
Add chflagsat(), modeled on fchmodat() with name to match FreeBSD.
major++
typo
Change rand(), random(), drand48(), lrand48(), mrand48(), and srand48()
to returning strong random by default, source from arc4random(3).
Parameters to the seeding functions are ignored, and the subsystems remain
in strong random mode.  If you wish the standardized deterministic mode,
call srand_deterministic(), srandom_determistic(), srand48_deterministic(),
seed48_deterministic() or lcong48_deterministic() instead.
The re-entrant functions rand_r(), erand48(), nrand48(), jrand48() are
unaffected by this change and remain in deterministic mode (for now).

Verified as a good roadmap forward by auditing 8800 pieces of software.
Roughly 60 pieces of software will need adaptation to request the
deterministic mode.

Violates POSIX and C89, which violate best practice in this century.
ok guenther tedu millert
Oops, got the sense of the test backwards.  Hilarious that we didn't spot it.
more standardsier: cast to int to make sure we keep the negative numbers.
observed by jonas termansen