protocol:

- put 4 bytes of time in client/server random
- implement AEAD bulk algorithm (TLS1.2)

code cleanup:

- remove show derivation on internal crypto state
- opaquify differents data type through newtype

security audit:

- add more unit tests for pure parts
- match security recommendation from the RFC

misc:

- portability
- implement more ciphers
- check & optimize memory footprint
- compare & optimize performance