* Unit tests for fieldelem/groupelem, including ones intended to
  trigger fieldelem's boundary cases.
* Complete constant-time operations for signing/keygen