A digest well-suited to operations on this curve, with output length near the curve's coordinate length.