Avoid field inverse for r == x comparison

As suggested by @gmaxwell. This seems to give a 3% speedup for verification.

Builds on top of #119.
`n` should be `p` (the field order), correct?