Golang: CPU DoS vulnerability affecting P-521 and P-384

I think it was found thanks to Wycheproof, which is quite cool.