edwards25519 add/sub算法

edwards25519 curve表示为：

$$-x^2+y^2=1+d{x}^2{y}^2,d=-(121665/121666),q=2^{255}-19$$

1. edwards25519 add算法

根据博客Extended twisted Edwards curve坐标系中提及：

---

注意，在Extended坐标系下，可提供更快的加法运算，在Projective坐标系下，可提供更快的double运算！！！实际使用时，可根据不同的计算选择不同的坐标系。

---

所以，add加法运算使用Extended坐标系，采用论文《Twisted Edwards Curves Revisited》中的Dedicated Addition in ${\epsilon }^e$算法：

对于edwards25519 curve，$a=-1$。
根据 https://doc-internal.dalek.rs/curve25519_dalek/backend/serial/curve_models/index.html 中定义，计算所得的$(X_3:Y_3:T_3:Z_3)$为extended坐标，对应的为$(W_1:W_2:W_0:W_3)$，详细的计算过程为：
$A=(Y_1-X_1)\ast (Y_2-X_2);B=(Y_1+X_1)\ast (Y_2+X_2);C=2d{T}_1\ast T_2=T_1\ast (2d{T}_2);D=2Z_1\ast Z_2;E=B-A;F=D-C;G=D+C;H=B+A$

$W_1=X_3=E\ast F;W_2=Y_3=G\ast H;W_0=T_3=E\ast H;W_3=Z_3=F\ast G$

$\because \frac{W_1}{W_3}=\frac{XT}{ZT}=\frac{X}{Z}=x=\frac{E\ast F}{F\ast G}=\frac{E}{G}$
$\because \frac{W_2}{W_3}=\frac{YZ}{ZT}=\frac{Y}{T}=y=\frac{G\ast H}{F\ast G}=\frac{H}{F}$
$\therefore X=E;Y=H;Z=G;T=F$

以上得到的即为$\sigma :((X:Z),(Y:T))$。
相应的代码实现为：

impl<'a, 'b> Add<&'b EdwardsPoint> for &'a EdwardsPoint {
    type Output = EdwardsPoint;
    fn add(self, other: &'b EdwardsPoint) -> EdwardsPoint {
        (self + &other.to_projective_niels()).to_extended()
    }
}

/// Convert to a ProjectiveNielsPoint
    pub(crate) fn to_projective_niels(&self) -> ProjectiveNielsPoint {
        ProjectiveNielsPoint{
            Y_plus_X:  &self.Y + &self.X,
            Y_minus_X: &self.Y - &self.X,
            Z:          self.Z,
            T2d:       &self.T * &constants::EDWARDS_D2,
        }
    }

impl<'a, 'b> Add<&'b ProjectiveNielsPoint> for &'a EdwardsPoint {
    type Output = CompletedPoint;

    fn add(self, other: &'b ProjectiveNielsPoint) -> CompletedPoint {
        let Y_plus_X  = &self.Y + &self.X;
        let Y_minus_X = &self.Y - &self.X;
        let PP = &Y_plus_X  * &other.Y_plus_X;
        let MM = &Y_minus_X * &other.Y_minus_X;
        let TT2d = &self.T * &other.T2d;
        let ZZ   = &self.Z * &other.Z;
        let ZZ2  = &ZZ + &ZZ;

        CompletedPoint{
            X: &PP - &MM,
            Y: &PP + &MM,
            Z: &ZZ2 + &TT2d,
            T: &ZZ2 - &TT2d
        }
    }
}

$ProjectiveNielsPoint:(Y+X,Y-X,Z,2dT)$。

2. edwards25519 sub算法

根据Extended twisted Edwards curve坐标系， 在Extended坐标系下，$(X:Y:T:Z)$的负数为$(-X:Y:-T:Z)$，$\Rightarrow P_1-P_2=P_1+(-P_2)=(X_1:Y_1:T_1:Z_1)+(-X_2:Y_2:-T_2:Z_2)$。

相应的代码实现如下：

impl<'a, 'b> Sub<&'b EdwardsPoint> for &'a EdwardsPoint {
    type Output = EdwardsPoint;
    fn sub(self, other: &'b EdwardsPoint) -> EdwardsPoint {
        (self - &other.to_projective_niels()).to_extended()
    }
}

impl<'a, 'b> Sub<&'b ProjectiveNielsPoint> for &'a EdwardsPoint {
    type Output = CompletedPoint;

    fn sub(self, other: &'b ProjectiveNielsPoint) -> CompletedPoint {
        let Y_plus_X  = &self.Y + &self.X;
        let Y_minus_X = &self.Y - &self.X;
        let PM = &Y_plus_X * &other.Y_minus_X;
        let MP = &Y_minus_X  * &other.Y_plus_X;
        let TT2d = &self.T * &other.T2d;
        let ZZ   = &self.Z * &other.Z;
        let ZZ2  = &ZZ + &ZZ;

        CompletedPoint{
            X: &PM - &MP,
            Y: &PM + &MP,
            Z: &ZZ2 - &TT2d,
            T: &ZZ2 + &TT2d
        }
    }
}

参考资料：
[1] Extended twisted Edwards curve坐标系
[2] 论文《Twisted Edwards Curves Revisited》
[3] https://doc-internal.dalek.rs/curve25519_dalek/backend/serial/curve_models/index.html