Restore P>Q in RSA key generation (#558)

The PKCS#1 standard says nothing about the relation between P and Q
but many libraries guarantee P>Q and mbed TLS did so too in earlier
versions.

This commit restores this behaviour.
diff --git a/ChangeLog b/ChangeLog
index 82bbff4..5350a3e 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -47,6 +47,7 @@
      subramanyam-c.
    * Fix documentation and implementation missmatch for function arguments of
      mbedtls_gcm_finish(). Found by cmiatpaar. #602
+   * Guarantee that P>Q at RSA key generation. #558
 
 Changes
    * Extended test coverage of special cases, and added new timing test suite.