Tweak vanity onion scheme to avoid producing invalid keys
Yawning says that the vanity onion scheme should add 8 and 8*B rather than 1 and B, so that the last 3 bits of the secret key are always valid.
Please see my branch prop224-horse on https://github.com/teor2345/torspec.git