Insecure hashing in bn256/sign method

[nikkolasg]

The method to hash a message to a point is insecure m -> scalar s -> s * G , as no easy method is provided by the go or cf packages and time pressure. We should try to implement a correct method, maybe by following the ideas in this paper https://www.di.ens.fr/~fouque/pub/latincrypt12.pdf . Although that will probably require forking off Go's or CF's package in order to access to the lower level methods.

[nkeywal]

discussion with @bkolad @nikkolasg
This is at the application level: the handel library does not take care of this point.
For Eth2, the Ethereum Foundation is still working on the hash function to use.

[nikkolasg]

good implementation : https://github.com/Project-Arda/bgls

[bkolad]

we had bug in our hashing function, fixed in:
#124
The implementation still suffers from problems described by @nikkolasg.