COLDCARD's anti-exfil/klepto very simple solution. Some call it Libsecp256k1... Such sophistication, much wow. https://github.com/switck/libngu/blob/356b9137cf7ddf5de66ec4cdc0a4d757b2e42790/ngu/k1.c#L244