[aorth]

> As an additional bonus, besides being formally verified, the HACL Curve25519 implementation is also almost 20% faster on 64 bit platforms than the existing NSS implementation

Bravo! Looking forward to that.