My memory is failing me... Is the scalar cryptography extension include the one that has the bitwise manipulation (rotations, etc) or is it that a separate spec?
The more general bitmanip extensions contain other things useful for e.g. address arithmetic. These are somewhat orthogonal to scalar crypto.