See https://github.com/bitcoin-core/secp256k1/blob/96cd94e385f64c1936abf0d1e303d12d0f5da980/include/secp256k1.h#L173