bls12-381 cost type: split on-curve and in-subgroup check (#217)

bls12-381 cost type: split on-curve and in-subgroup check (#217) #557