```
Nothing is wrong with the current implementation. But it looks out of
place because we generally prefer bit operations because they're faster
and are more likely constant-time.
```
Backport of [[https://github.com/bitcoin-core/secp256k1/pull/882 | secp256k1#882]]