from kjell@

Now passes the regress tests.

ok pedro@, millert@

disabled.  Magne Oestlyngen.

scope so that passing a NULL digest is equivalent to the Pad function
(like it used to be).  Fixes skey w/ sha1 as noticed by David Krause.

for the host byte order is when we copy the final digest (and that
is just an optimization).

man help jmc@

Use sizeof() in the Init functions where it makes sense.
Use weak aliases instead of wrapper functions.
Probably should have gone in before the major bump but as these are only
used internally by the sha2 functions themselves there should be no problem.

It was defined before and there is no need to for this knob...

OK otto@

I missed earlier.

The Pad function does padding like in Final but does not finish processing.
The FileChunk function creates a digest from a portion of a file.
Also made the length parameters consistent (and size_t).

ok deraadt@ millert@

handle a few subtle details caught by the regression tests: correct
termination, non copying if buffer length == 0, errno setting.
let all former users of __strerror go through strerror_r.
Work by Todd Miller and I. Okay millert@.

okay millert@

okay millert@.
- atoi was bogus.
- atoi was not reentrant.
- there's no reason to cast stuff to unsigned int.

o Make MD5Update() more readable
o Simplify padding in MD5Final()
o Do copy + byte flip in MD5Transform() instead of in the caller
The result is a faster md5 and the byte order foo is kept to a minimum.

functions can take a NULL buf pointer.  They will malloc memory as
needed in this case.

aligned so copy it in a way that a) is endian indepenent and b) does
not rely on alignment.  Problem found and solution tested by hshoexer@

Add constants for buffer lengths and use them.
Make bit count 64bit based on changes by niklas@ long ago.
Conver htole32n() to macros and unroll loops.

changes Niklas made to the md5 code long ago.  OK hshoexer@

previously lived in foohl.c.  The foohl.c files are now generated
via sed, though perhaps cpp could be used in the future.
Use u_int8_t instead of unsigned char for the buffers struct fooContext.
Add constants for buffer lengths and use them in function prototypes
and the man pages.
This is basically cosmetic surgery; there should be no functional changes.
OK deraadt@

This allows an application to only update a password entry if it is
in the state it expects.  Additionally, if the old passwd struct
is specified the new one may have a different pw_name field since
matching is done on the original.  Adapted from FreeBSD.