Wyatt Howe

Replace the current key exchange with EC-HMQV

1

The [paper](https://eprint.iacr.org/2018/163.pdf#page=47) only specifies that the key exchange has to happen inside a prime order (elliptic curve) group, but with the way they define it, I'm not sure this is...

Make sign up protocol completely oblivious as per [https://eprint.iacr.org/2018/163.pdf](https://eprint.iacr.org/2018/163.pdf#page=47) (p. 47)

### Document the purpose of `point.canonical()`, performance benefit, equality of the bytes returned by `point.to_bytes()`. We just need to be clear that the bytes spit out (when you type a...

Implement additive Ristretto255 scalar group operations in `oblivious.ristretto.scalar` to match `oblivious.bn254.scalar`'s arithmetic features, and possibly even `scalar.from_int`. --- This discrepancy was first discussed in issue https://github.com/nthparty/oblivious/issues/8 as discovered by @rashmibhle.