Split off 'extra25519' package.

This change moves the field and group operations in ed25519/edwards25519
and splits off a ed25519/extra25519. The latter contains utilities for
converting Ed25519 to Curve25519 keys and back and also an experimental,
Elligator implementation.