This change adds an AEAD interface to EVP and an AES-GCM implementation
suitable for use in TLS.

Initial fork from f2d678e6e8 (1.0.2 beta).

(This change contains substantial changes from the original and
effectively starts a new history.)