Point deserialization lacks checks and sanitization

[AntoineRondelet]

See thread here: #43 (comment)

TL;DR:
No checks are made to verify that the recovered point lies on the curve, and nothing is done to make sure that we are manipulating elements of the safe subgroup.