Smaller doc tweaks, suggested by Nikos.

nettle.texinfo

@@ -1347,8 +1347,10 @@ Analogous to @code{blowfish_encrypt}
 @subsection Camellia
 
 Camellia is a block cipher developed by Mitsubishi and Nippon Telegraph
-and Telephone Corporation, described in @cite{RFC3713}, and recommended
-by some Japanese and European authorities as an alternative to AES. The
+and Telephone Corporation, described in @cite{RFC3713}. It is
+recommended by some Japanese and European authorities as an alternative
+to AES, and it is one of the selected algorithms in the New European
+Schemes for Signatures, Integrity and Encryption (NESSIE) project. The
 algorithm is patented. The implementation in Nettle is derived from the
 implementation released by NTT under the GNU LGPL (v2.1 or later), and
 relies on the implicit patent license of the LGPL. There is also a
@@ -2295,7 +2297,7 @@ Galois counter mode is an @acronym{AEAD} constructions combining counter
 mode with message authentication based on universal hashing. The main
 objective of the design is to provide high performance for hardware
 implementations, where other popular @acronym{MAC} algorithms
-(@pxref{Keyed hash functions} become a bottleneck for high-speed
+(@pxref{Keyed hash functions}) become a bottleneck for high-speed
 hardware implementations. It was proposed by David A. McGrew and John
 Viega in 2005, and recommended by NIST in 2007,
 @uref{http://csrc.nist.gov/publications/nistpubs/800-38D/SP-800-38D.pdf,
@@ -2480,7 +2482,6 @@ of the block size.
 @deftypefunx void gcm_aes_encrypt (struct gcm_aes_ctx *@var{ctx}, size_t @var{length}, uint8_t *@var{dst}, const uint8_t *@var{src})
 @deftypefunx void gcm_aes128_decrypt (struct gcm_aes128_ctx *@var{ctx}, size_t @var{length}, uint8_t *@var{dst}, const uint8_t *@var{src})
 @deftypefunx void gcm_aes192_decrypt (struct gcm_aes192_ctx *@var{ctx}, size_t @var{length}, uint8_t *@var{dst}, const uint8_t *@var{src})
-Encrypts or decrypts the data of a message. All but the last call for
 @deftypefunx void gcm_aes256_decrypt (struct gcm_aes256_ctx *@var{ctx}, size_t @var{length}, uint8_t *@var{dst}, const uint8_t *@var{src})
 @deftypefunx void gcm_aes_decrypt (struct gcm_aes_ctx *@var{ctx}, size_t @var{length}, uint8_t *@var{dst}, const uint8_t *@var{src})
 Encrypts or decrypts the data of a message. All but the last call for
@@ -2529,7 +2530,6 @@ of the block size.
 @deftypefun void gcm_camellia128_encrypt (struct gcm_camellia128_ctx *@var{ctx}, size_t @var{length}, uint8_t *@var{dst}, const uint8_t *@var{src})
 @deftypefunx void gcm_camellia256_encrypt (struct gcm_camellia256_ctx *@var{ctx}, size_t @var{length}, uint8_t *@var{dst}, const uint8_t *@var{src})
 @deftypefunx void gcm_camellia128_decrypt (struct gcm_camellia128_ctx *@var{ctx}, size_t @var{length}, uint8_t *@var{dst}, const uint8_t *@var{src})
-Encrypts or decrypts the data of a message. All but the last call for
 @deftypefunx void gcm_camellia256_decrypt (struct gcm_camellia256_ctx *@var{ctx}, size_t @var{length}, uint8_t *@var{dst}, const uint8_t *@var{src})
 Encrypts or decrypts the data of a message. All but the last call for
 each message @emph{must} use a length that is a multiple of the block