See discussion at https://gnusha.org/secp256k1/2024-07-01.log, also mentioned in https://github.com/bitcoin-core/secp256k1/issues/1549.