Recover implicit on-curve points