Following on from #42 (review) and #42 (comment)
it's worth revisiting how subtle's constant time values are used throughout the lib
We should state the expectations of constant time operations in the readme and maybe also consider how CtOption is used in the algorithms of this library.