Optimized, Constant-Time P-256 Implementation

[paragonie-security]

Making generic code constant-time incurs a performance penalty and makes everyone sad. Instead, we should update the code to support optimized implementations of specific elliptic curves.