ec_nonzero_ybit_allowed
if (ec_nonzero_ybit_allowed(form) && ybit != 0)
if (*out_ybit != 0 && !ec_nonzero_ybit_allowed(*out_form)) {