About 4 days of claude work, fully vibed:
"Across both the native C-to-C and the JVM/JNI comparison, our custom C secp256k1 implementation — written from scratch — matches or beats Bitcoin's libsecp256k1 on every Nostr-relevant operation, by roughly 10–30% on single ops (sign, verify, ECDH, pubkeyCreate, etc) and 4.5×–8.3× on batch verification."
"On batch operations, our batch verify for 200 events hits ~190,000 ev/s through JNI vs ~23,000 ev/s for JNI/libsecp verifying them individually today, a performance gain of ~826% over the current lib".
And yes, the lib not only passes all tests from Bitcoin core, but all of our event sign and verify tests as well.