Rather than computing bb from b by two square roots, each of which
actually calculates sqrt(x) as x^{2^{m-1}}, we can save time by
computing qdrt(x) as x^{2^{m-2}}.
I think this means that nobody uses F_SQRT on binary fields any more,
but I'll keep them around just in case.