<jeffro256> tevador: I upstreamed the unclamped API changes to mx25519 here: tevador/mx25519 #15. It would be good to get a review soon, since it's a prereq for carrot_core

Nothing changes behavior wise for Carrot right if we already had implemented the unclamped scalar mult? This is more of an API change so it's explicit what is being used.

<jeffro256> Yes, exactly

<jeffro256> My branch of mx25519 that is used in fcmp++-stage implements unclamped behavior by default

<jeffro256> This PR allows support for different modes, and makes non-RFC7748-conformant behavior explicit

<jeffro256> Because making unclamped the default bhevaior is probably a bad design choice for a public-facing API

yeah L:)