Some changes I propose and would like to review before merging.
I've unified the algorithm parameters for consistency. So it's always a bullet with:
name - description with no other definitions
I've unified the steps in the algorithm so that we don't mix normal sentences with pseudocode.
I've added "INVALID" variant into description of algorithms' output where the function could fail.
I rewrote the repeat-until loop into a while loop in hash_to_curve for better readability.
I've cleaned up the EC ciphersuites definitions. The 2n and cofactor parameters are within the bullet specifying curve. The m parameter is determined by EC2OSP implementation, so I moved it into this bullet.
Some changes I propose and would like to review before merging.
name - description with no other definitions"INVALID"variant into description of algorithms' output where the function could fail.2nandcofactorparameters are within the bullet specifying curve. Themparameter is determined by EC2OSP implementation, so I moved it into this bullet.