eddsa_compute_s
ret = eddsa_compute_s(&s, hash, hsize); EG(ret, err);
ret = eddsa_compute_s(&s, digest, digest_size); EG(ret, err);