Say why you'd confidently use it now.

Rework paragraph naming.

Fix mistake hashing for Salsa20-Daence. Implement ChaCha-Daence.

For Salsa20-Daence: Using H_k(H_k(x) || H_k(y)) doesn't work because
H_k(x) || H_k(y) is not independent of the outer H_k.  For now, add
another 32 bytes to the key (ugh), which naturally changes all the
test vectors.

For ChaCha-Daence: Tweak the hashing to match what ChaCha/Poly1305
does a little better.  No substantive change, although if you had
implemented this the test vectors would change.  (That's why I put a
big warning label on the front!)

Fix off-by-one in our favour.

Shave some more IAQs.

Add daence.[ch] test program written in terms of NaCl.

Put warning on the cover.

initial tree