bitcoin/secp256k1 — pull request #120 by sipa (2014-11-28 14:33:50+00:00)
Title: Optimize doubling: secp256k1 has no y=0 point

This gives a 1.5% improvement when using the endomorphism, 2.3% improvement when not.