Conjugate addition (Computing both P+Q and P-Q)

[mratsim]

From Patrick Longa's PhD Thesis Appendix:

---

Note: Jacobian coordinates do not have a complete exception-free addition formula, they require special casing adding infinity, the same number or its opposite. So they are not suitable for constant-time operations unless we introduce masked copies. Twisted Edwards curve have a complete addition law.