In group/nist/curve.go, comment is saying the Sub and Neg implementation of the curvePoint are non-optimal. One should find out why and what is the optimal algorithm for this.