+catacomb (2.2.0) experimental; urgency=low
+
+ * catacomb2: Fix rsa_recover crash on even modulus.
+ * catacomb-bin: Report error taking factorial of negative input.
+ * catacomb2: Fix EC_FIND and EC_NEG on 2-torsion points of prime curves.
+ * catacomb-dev: Support multiple flavours of EC point compression.
+ * catacomb2: Fix theoretical rsa_recover crash if factoring loop runs
+ out of prime numbers.
+ * catacomb2: Overhaul crypto primitives used in true-random generator.
+ * catacomb-bin: Improve rspit: high-resolution timing, and 64-bit size
+ support.
+ * catacomb-dev: New conversions between MP integers and C integer types.
+ * catacomb2: Change gcipher for Seal incompatibly. The IV is now
+ big-endian bytes (rather than `uint32'), and the `block size' is 4.
+ * catacomb2: Mix a constant string into DSA nonce generation to improve
+ resistance to protocol interference.
+ * catacomb2: Fix the freewheel random source, which hasn't been enabled
+ for ages due to a configure-script bug.
+ * catacomb-bin: The key tool can now read and write multiple
+ presentations for key fingerprints.
+ * catacomb2, catacomb-dev: Support Daniel Bernstein's Salsa20 and ChaCha
+ stream ciphers.
+
+ -- Mark Wooding <mdw@distorted.org.uk> Mon, 20 Jul 2015 14:15:31 +0100
+