pub fn cswap(c: Choice, a: &mut [u8], b: &mut [u8])
Conditionally swap two equal-length buffers in constant time.
Used by Montgomery ladders to hide which scalar bit is being processed.