Add some documentation

Rename "derive" -> "blind"

Check for failure on randombytes().