crypto/elliptic: specific unreduced P-256 scalars produce incorrect results [1.19 backport] #58719
Description
@FiloSottile requested issue #58647 to be considered for backport to the next 1.19 minor release.
@gopherbot please backport. CL 471255 is a security fix.
/cc @golang/security and @golang/release