serpent: Actually bitslice encryption and decryption (#474)

The Serpent sboxes were designed to be bitsliced, but previously were
implemented via table lookups instead.

This change improves performance by approximately a factor of 20. In
addition, the avoidance of table lookups removes the risk of cache-based
side channels.

Author: randombit