This makes us Suite B compliant and saves 32 bytes per frame. The
AES/GCM implementation refuses to decrypt the frame header before
checking the MAC, so we have to use AES/CTR to peek at the header. The
header is still covered by the MAC, and we still check it after peeking!

Connections can occasionally be made to a server
socket after ServerSocket.close() has returned, so don't check that a
connection attempt fails.

tests.

CryptoComponentImpl needs some unit tests.

heavy load.

This matches the security level of AES-256 according to NSA Suite B. To
better comply with Suite B we should replace the combination of CTR mode
and HMAC with GCM, which would reduce the MAC size from 48 to 16 bytes.

own ant target.

consequent distinction between segments and frames.