* mdw/rsvr: (49 commits)
progs/cc-kem.c: Reimplement the `naclbox' bulk cipher in terms of AEAD.
progs/cc-kem.c: Split `aead_init' into two pieces.
symm/latinpoly-def.h: Implement Bernstein's `crypto_secretbox'.
symm/latinpoly-def.h, etc.: Refactor in preparation for a related scheme.
symm/gaead.h: Specify a flag for `AEAD' schemes which don't do AAD.
symm/t/chacha: Add IETF test vector for XChacha20-Poly1305.
symm/gcm-*.S: GCM acceleration using hardware polynomial multiplication.
symm/gcm.c: Make `gcm_mktable' and `gcm_mulk_...' be CPU-dependent.
symm/gcm.c: Add low-level multiplication tests.
base/regdump.[ch], etc.: Fancy register dumping infrastructure.
base/asm-common.h: Add some macros for shifting entire NEON vectors.
base/asm-common.h: Use `push' and `pop', for Thumb compatibility.
base/asm-common.h: Provide default frame pointer registers.
base/asm-common.h: Prefer `nil' as the unspecified-argument sentinel.
base/asm-common.h: Fix bogus indentation.
base/asm-common.h: Settle on no spaces around keyword-argument `='.
base/asm-common.h: Add an `IMM' macro for immediate operands.
base/asm-common.h: Implement the `r' decorator for `MEM' accesses.
base/asm-common.h: Hoist the `_DECOR_mem_...' definitions.
base/asm-common.h: Put `l' suffix on `si', `di', etc. under `CPUFAM_AMD'.
...