This option is a trade-off between a feature a code size: it allows people who don't need that feature to avoid paying the cost in code size, by disabling it.

However:

• the code size savings are not that significant
• in the future we can design a mechanism for that an other ssl_config options that will save more code size and be more uniform, see #3535 "Hardcoding of SSL options"

Wor

Please add provider support for the "botan encryption" command and implement the needed AES operations with PKCS#11.
I could not find any command line tool that I can use for that. OpenSSL's PKCS#11 engine does not support AES either.

It would be nice to have an implementation that returns an iterator over the 4 coordinates of a RistrettoPoint or an EdwardsPoint.

Ex:

use zerocaf::edwards::EdwardsPoint;
use zerocaf::traits::Identity();
let identity = EdwardsPoint::Identity();
identity.into_iter().map(|coordinate| do_something_with_cooord(coordinate)).collect();