A formalization of Zcash's Pedersen hash.
This is described in [ZPS:5.4.1.7], which refers to several other parts of [ZPS]. We may split this file and XDOC topic into multiple ones that correspond to different parts of [ZPS], but for now we put here everything needed to define Pedersen hash.