By the way, what’s the status of ristretto255? The latest version of the internet-draft [0] expired a while ago.
[0] https://datatracker.ietf.org/doc/draft-hdevalence-cfrg-ristr...
[0] https://datatracker.ietf.org/doc/draft-hdevalence-cfrg-ristr...
I kind of hope they'll also add ristretto448 since RFC 7748 and 8032 include X448/Ed448, so that the draft has feature parity (and covers the h = 4 case properly).
[1] https://mailarchive.ietf.org/arch/msg/cfrg/3RRpX9hME5ErtAzCo...
[2] https://mailarchive.ietf.org/arch/msg/cfrg/wd8pprUfJoNhvEQE0...
[3] https://mailarchive.ietf.org/arch/msg/cfrg/pT2ML68BapPAcUiSk...