string nist_hash(bignum x)
The (slow) NIST method of generating DSA primes. Algorithm 4.56 of Handbook of Applied Cryptography.