implement much improved evaluation (thanks to D.J. Bernstein,
A. Huelsing, T. Lange, and R. Niederhagen).