All vectors were tested against libsecp256k1, and all verification vectors were checked against OpenSSL. A check was also added to the verify specification to reject pubkeys with x or y coordinates greater than or equal to p, but output on valid input is unchanged.
See #2224.