Merge #732: Retry if r is zero during signing

[secp256k1.git] / TODO

* Unit tests for fieldelem/groupelem, including ones intended to
  trigger fieldelem's boundary cases.
* Complete constant-time operations for signing/keygen