pub fn fe25519_sub(a: &[u64; 4], b: &[u64; 4]) -> [u64; 4]
a - b modulo 2^255 - 19 on 4 x 64-bit limbs (see fe25519_add): a borrow is folded back as -38, twice.
fe25519_add