Implement Presigning/Signing with O(N) identification cost

[fjarri]

(Figure and section numbers correspond to the reference paper https://eprint.iacr.org/2021/060)

• Figure 9: ECDSA Pre-Signing (Rounds 1 to 4) (includes Π^{enc-elg}, Π^{aff-g}, Π^{aff-p}, Π^{log*})
• Figure 10: ECDSA Pre-Signing (Round 5, 6 & Output) (includes Π^{log*}, Π^{elog})
• Figure 13: ECDSA Signing

Errors:

• Figure 11: Nonce-Reveal Fail (includes П^{Nth})
• Figure 12: Pseudo-Key Reveal Fail (includes П^{Nth}, Π^{log})

Sigma-protocols:

• Π^{Nth} (Section 2.2.2) - no figure but probably the same as Fig. 23?
• Figure 23: Dlog Equality – Π^{log}
• Figure 24: Dlog with El-Gamal Commitment – Π^{elog}
• Figure 26: Paillier Affine Operation with Paillier Commitment ZK-Proof – Π^{aff-p}
• Figure 27: Range Proof w/ EL-Gamal Commitment – Π^{enc-elg}