@weilu agreed, this doesn't match up.  I'm going to have to go over this again, the fact this (if amended) doesn't match up with the public key recovery in `ecdsa.js` makes me think something has been missed.