Curve25519 signatures made compatible with 2.18.1 release

[rafalsk]

I have updated my signatures on Curve 25519 to be compatible with Botan 2.18.1 Release.

Wanted to make them compatible with 3.0 alpha straight away but from the first looks on it, additional work is needed.

Description of changes: Curve25519 is a Montgomery curve over a prime field, while Ed25519 is a Twisted Edwards curve. Further, Ed25519 is birationally equivalent to Curve25519. Here, the representations are converted on-the-fly (montgomery x-coordinate is translated into edwards y during signature verification). The sign-information is kept within the resulting signature, which would otherwise be lost.

Rationale: we use it in the GRIDNET Project (https;//gridnet.org), as the main work-horse. It's been incorporated into the GridScript programming language, usage of a single key allows for many 'cool' functionalities and makes user use only one key at any time. We've also done a JavaScript implementation of it which passes all the test-vectors.

When making signature the steps are as follows:

• the Curve25519 private keys is converted to an Ed25519 public key through a scalar multiplication (ge_scalarmult_base)
• a sign bit is retrieved from the Edward's point representation
• an Ed25519 signature is performed
• the sign bit is encoded into signature (in an unused high bit)

Once I have more time in 1-2 months I can write more detailed description and also upgrade to 3.0+ ~~for now here it is.

The initial pull-request to the master branch is here https://github.com/randombit/botan/pull/1239

It's been all tested, also with amalgamation build (had to move some things around for it to work).