This is the x25519 counterpart to `edwards25519.clearCofactor()`.
It is useful to check for low-order points in protocols where it matters and where clamping cannot work, such as PAKEs.
93e11b824aFrank Denis committed on 4/7/2022, 8:46:23 AM· committed by GitHubparent289ba5d