Point deserialization lacks checks and sanitization #51
Description
See thread here: #43 (comment)
TL;DR:
No checks are made to verify that the recovered point lies on the curve, and nothing is done to make sure that we are manipulating elements of the safe subgroup.