anchor.diff:  (defconstant +ed448-l+ 181709681073901722637330951972001133588410340171829515070372549795146003961539585716195755291692375963310293709091662304773755859649779)
   (defconstant +ed448-d+ -39081)
   
  -(declaim (type ed448-point +ed448-b+))
   (defconst +ed448-b+
  -  (vector 224580040295924300187604334099896036246789641632564134246125461686950415467406032909029192869357953282578032075146446173674602635247710
  -          298819210078481492676017930443930673437544040154080242095928241372331506189835876003536878655418784733982303233503462500531545062832660
  -          1))
  +  (make-instance 'ed448-point
  +                 :x 224580040295924300187604334099896036246789641632564134246125461686950415467406032909029192869357953282578032075146446173674602635247710
  +                 :y 298819210078481492676017930443930673437544040154080242095928241372331506189835876003536878655418784733982303233503462500531545062832660
  +                 :z 1))
  +(defconst +ed448-point-at-infinity+
  +  (make-instance 'ed448-point :x 0 :y 1 :z 1))
   
   
   (eval-when (:compile-toplevel :load-toplevel :execute)
  
positive.code:     (setf (ldb (byte 2 0) (elt h 0)) 0)
      (setf (ldb (byte 1 7) (elt h (- (ceiling +ed448-bits+ 8) 2))) 1)
      (setf (elt h (- (ceiling +ed448-bits+ 8) 1)) 0)
      (let* ((a (ed448-decode-int (subseq h 0 (ceiling +ed448-bits+ 8))))
             (rh (ed448-hash +ed448-dom+ (subseq h (ceiling +ed448-bits+ 8) (ceiling +ed448-bits+ 4)) m))
             (ri (mod (ed448-decode-int rh) +ed448-l+))
             (r (ed448-scalar-mult +ed448-b+ ri))
             (rp (ed448-encode-point r))
             (k (mod (ed448-decode-int (ed448-hash +ed448-dom+ rp pk m)) +ed448-l+))
             (s (mod (+ (* k a) ri) +ed448-l+)))
        (make-signature :ed448 :r rp :s (ed448-encode-int s)))))
  
  (defun ed448-verify (s m pk)
    (declare (type (simple-array (unsigned-byte 8) (*)) s m pk)
  
negative.code:     (setf (ldb (byte 2 0) (elt h 0)) 0)
      (setf (ldb (byte 1 7) (elt h (- (ceiling +ed448-bits+ 8) 2))) 1)
      (setf (elt h (- (ceiling +ed448-bits+ 8) 1)) 0)
      (let ((a (ec-decode-scalar :ed448 h)))
        (ec-encode-point (ec-scalar-mult +ed448-b+ a)))))
  
  (defmethod make-signature ((kind (eql :ed448)) &key r s &allow-other-keys)
    (unless r
  