Function field_neg 

pub fn field_neg(x: Fe17) -> Fe17

-x mod p for canonical x (zero stays zero).

Combinational. p_minus alone would map 0 to p, which is not canonical, hence the zero test.