Investigate adding an NSS backend

I used OpenSSL for expediency, but there's no reason we can't use NSS if it exposes similar primitives. @martinthomson, if you have cycles to help, or point me in the right direction, that would be most welcome.

It occurs to me that, if we did this, we could use ecec to decrypt messages on Fennec without spinning up Gecko.