This is actually a lie: the condition is tested in both curve implementations but not returned by the Haskell API. Will be a reminder to add this in the future. A function 'allocRetAndFreeze' could be useful.
Module 'Curve448' now use decaf.
This makes the API uniform for both D-H functions, avoids confusion and leaves the name Ed448 available for EdDSA.
