use mp_sub instead of mp_mod when possible.
increment generator candidate for DH instead of creating a new random one each time.
fix potential bugs when DH_Derive and KEA_Derive, where the secret is longer than the buffer the user requests.
check input key size to RSA_NewKey.
implement private key op with no CRT for PKCS12.
reduce base mod p and q before using mp_exptmod.
use mpl_lsh in pqg code (in place of exponent and multiply).
change PQG_Verify to return SECSuccess unless there is a library failure (not if verification fails).
