Curve25519, Ed25519 and ristretto255 for the sodium stand-in, over @noble/curves.
Group, field and scalar arithmetic is noble's. This file keeps the libsodium behaviour around
it: which encodings are refused, the key used in the signing hash, and the 256-bit wrap in
scalar.add and scalar.sub. JavaScript BigInt is not constant-time, so this is not one.
Curve25519, Ed25519 and ristretto255 for the sodium stand-in, over
@noble/curves.Group, field and scalar arithmetic is noble's. This file keeps the libsodium behaviour around it: which encodings are refused, the key used in the signing hash, and the 256-bit wrap in
scalar.addandscalar.sub. JavaScript BigInt is not constant-time, so this is not one.