Cleanup (thx zzz)
Method to check if a point is on its own curve
More cleanups from zzz
Moved precomputation of -A into EdDSAPublicKeySpec

For public keys that are used to verify a single message, this provides no
speed benefit, and requires the storage in memory of another GroupElement and
its dblPrecmp. For public keys that are used to verify more than one message,
the storage increase is the same, but the precomputation only occurs once now
instead of during every verification.
Moved methods that should not be public; clarified why some vars/methods package private
Updated README.md
Fast constant-time cmov (thx zzz)
EdDSAPrivateKey parameters should be transient to prevent serialization
Dropped unnecessary FieldElement.cmov()
Proper constant-time Utils.equal()
Fix test to check for correct Exception
More cleanups (thx zzz)
Trivial simplification of GroupElement.dbl()
Speed up verify about 20% by using multiply() for square() instead of modPow()
Speed up FieldElement.squareAndDouble()
BigInteger.modInverse() is a little faster than BigInteger.modPow()
Cleanups (thx zzz)
Compare methods in ref10 to methods in this impl
Tidy up
Filled in point arithmetic