Remaining work needed for Gallina verification code
---------------------------------------------------
+ efficient GF exponentiation
+ efficient GF inverse
+ make EdDSA point addition use ModularBaseSystem
+ represent scalars (Fl) in ModularBaseSystem (large c)
+ canonical representations of field elements