Internal changes which break compatibility with previous versions
(you knew this would happen). Added ARM NEON support. Added support for precomputation on public keys, which speeds up later signatures and ECDH calls. See history.txt or the doc for details. Reworked internals so that private keys can be derived from any 32-byte secret random value. This also means that secret keys can be "compressed" for cold storage. Added more tests. Running the tests now requires GMP, though Goldilocks itself does not. Linking now uses visibility instead of exported.sym.