Optimize verification: avoid field inverse

Suggested by Greg Maxwell.