This attaching P_OVER_FOUR to curve business is a little shady. As discussed in IRC, maybe we should consider making it part of sec.js?