Generating validation data

[szarnyasg]

Validation is only mentioned casually in the specification. While it is discussed in detail in the audit guidelines, it should be emphasized a lot more in the main body of the specification.
Also, the implementations use the naming convention validation parameters, which might be misleading (allows confusion with the substitution parameters) so let's change that to validation data (or whatever we come up with).