← Back to Bitcoin Improvement Proposals
BIPinformational

fix: correct misleading ORDER_HALF comment in bip-0374

The comment for ORDER_HALF incorrectly stated it represents "Number of valid distinct x coordinates on the curve". This is wrong - ORDER_HALF is simply half the group order, commonly used for ECDSA low-S signature normalization. The number of valid x coordinates on secp256k1 is approximately (p-1)/2 where p is the field size, which is a completely different value. Also clarified the ORDER comment from "plus 1 for infinity" to "including infinity" for better accuracy.

No reviews
zeroprooff·Updated Feb 27, 2026·0 reviews·0 attestations·View source
Collections:BIPs — Open

Specification

The comment for ORDER_HALF incorrectly stated it represents "Number of valid distinct x coordinates on the curve". This is wrong - ORDER_HALF is simply half the group order, commonly used for ECDSA low-S signature normalization. The number of valid x coordinates on secp256k1 is approximately (p-1)/2 where p is the field size, which is a completely different value.

Also clarified the ORDER comment from "plus 1 for infinity" to "including infinity" for better accuracy.

Discussion (0 threads)

Sign in to start a discussion on this spec.