Restore P>Q in RSA key generation (#558)

The PKCS#1 standard says nothing about the relation between P and Q
but many libraries guarantee P>Q and mbed TLS did so too in earlier
versions.

This commit restores this behaviour.
diff --git a/ChangeLog b/ChangeLog
index b8d3a5b..7e0ab74 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -25,6 +25,7 @@
      by inestlerode. #559.
    * Fix documentation and implementation missmatch for function arguments of
      mbedtls_gcm_finish(). Found by cmiatpaar. #602
+   * Guarantee that P>Q at RSA key generation. #558
 
 Changes
    * Add compile time option for relaxed X509 time verification to enable