SafeCurves: choosing safe curves for elliptic-curve cryptography - eviltoast