smult_curve25519_donna_c64.c assumes little-endian.