GitLab

GCM-cipher: just trust the user to call update_ad at the right time

Ensures the selected cipher/mode/padding is actually used
and padding and tag are actually checked.

cipher_info->iv_size == 0 is no longer ambiguous, and
cipher_get_iv_size() always returns something useful to generate an IV.

- no support for additional data
- no support for tag

Primarily so that rsa_private() receives an RNG for blinding purposes.

Conflicts:
	include/polarssl/config.h
	library/ssl_cli.c
	library/ssl_srv.c
	library/ssl_tls.c