@weilu yes, you're right.   I'll go over `2.3.4 Octet-String-to-Elliptic-Curve-Point Conversion` in the `sec` PDF to triple check the expected control flow.

**edit:** see comment below.