Not sure `pointAdd` and `pointDouble` can be side-channelled
Use Montgomery ladder for point multiplication

The tests pass and performance is just a bit slower than before.

There is no significant difference between signing with *slow* or *fast*
key.

See #11