Black-box testing for the Jubjub scalar field

[ebfull]

These kinds of tests exist in pairing but we'd like to perform them for Fs. However, I don't want to implement Fs in pairing. So, this is tricky.

Best alternative I can think of now is to add a feature to pairing which exposes the black-box tests.

[daira]

Yeah that seems like a reasonable approach.