Draft: Initial backend for an ntor-v3 implementation.

This code is based directly on the specification, without looking at the reference implementation or the implementation in Arti. Nonetheless, it is now passing with the test vectors generated by the reference implementation.

See proposal 332 for the specification.

Note that this isn't wired up to anything yet: nothing will actually perform this handshake.