David

> https://github.com/sipa/safegcd-bounds Even more details [here](https://github.com/bitcoin/bitcoin/blob/8cb6ab0b971a27ba255ad6a48959a8c7b84c00f3/src/secp256k1/doc/safegcd_implementation.md?plain=1#L2). The current impl results in the following bounds (obtained by just printing out the iteration count while running the crate test suite, sampling the...

I guess the original question still stands: is something like this acceptable? I'm on the fence myself, hence the draft.

@tarcieri Did you get this to actually work in the end?