prove reduction safety for p<2^128-2^97-1; maybe eliminate that p?
make a portable alternative to reduce.s
do 2-adic final reduction; 1500 cycles is absurd
use mmecrt in sign
use a sane method of bit extraction in prime.c
eliminate gmp in favor of something with low overhead that doesn't barf
make a sigs library for use in other applications
shorten public keys, as per Petry, assuming not covered by V-Z patent
investigate existing formats for declarations of signature semantics
switch over to substdio
allow multiple-file verification
