Name already in use

This fixes #396

[skip ci]

Fix/411
(cherry picked from commit 8972027)

ecc_sign_hash blinding CVE-2018-12437
(cherry picked from commit 6aef5e3)

(cherry picked from commit e4a03ca)

(cherry picked from commit 715103a)

(cherry picked from commit a32d1af)

Make the build logic more robust for BSD systems
(cherry picked from commit 5ab8dcf)

makefile.shared: Respect LIBTOOL.
(cherry picked from commit a528528)

(cherry picked from commit 196f25e)

…ning-cast

clang-tidy: misc-misplaced-widening-cast
(cherry picked from commit 248352c)

With back-ported patch from src/misc/copy_or_zeromem.c back to
src/encauth/ccm/ccm_memory.c

…ing-compare

clang-tidy: misc-suspicious-string-compare
(cherry picked from commit 24f933d)

clang-tidy: readability-redundant-control-flow
(cherry picked from commit 4cc8d08)

Fix -Wunused-const-variable in aes_tab.c
(cherry picked from commit 5c31c3d)

implement DER recursion limit
(cherry picked from commit af67321)

ltc: ctr: improve performance
(cherry picked from commit 9b80d07)

This makes fortuna_import() kinda compliant to the "Update seed file"
behavior of the original paper.
It differs from the original behavior in that it allows to import
seed files which are larger	than 64 bytes.

(cherry picked from commit 39d4a14)

(cherry picked from commit cccd1e3)

(cherry picked from commit d502869)

(cherry picked from commit 0c05e53)

(cherry picked from commit 04ce8cf)

LTC_EASY & time_cipher_lrw
(cherry picked from commit ea5b6cd)

Fix warnings in `XMAC_file()` functions when compiling with `LTC_NO_FILE`.
(cherry picked from commit 11cda2e)

The error produced by `make zipup` - but ignored by make - was:

```
...
fixme check
makefile_include.mk:448: recipe for target 'zipup' failed
make: [zipup] Error 123 (ignored)
mkdir -p libtomcrypt-...
```

This fixes #340

[skip ci]

(cherry picked from commit fc6eb3e)

Problem occurs in the condition of the following case:

1st decryption:
Decrypt a ciphertext whose length is a multiple of the block size (16B)
(len = n * block_size)
2nd decryption:
Decrypt the continuing ciphertext whose length is not a multiple of the
block size
(len = m * block_size + l)

In this case accel_ctr_encrypt() is firstly used at the 2nd decryption.
If pt and ct are not updated, the top (l = len % block_size) bytes of
decryption result are sometimes destroyed.

From: Tetsuya Yoshizaki <yoshizaki.tetsuya@socionext.com>
Signed-off-by: Tetsuya Yoshizaki <yoshizaki.tetsuya@socionext.com>
Signed-off-by: Victor Chong <victor.chong@linaro.org>
(cherry picked from commit d1d3ae2)