SIG(0)

This implements SIG(0) signing and verification of one-off messages based on the interface outlined in your sig0 branch. Documentation could do with some work—at the least removing the brackets from the SIG(0) header so godoc displays it properly—but otherwise the basics are there. Can you take a look?
I would just write it out twice. In older uses of this code, I've done the same.