crypto/elliptic: specific unreduced P-256 scalars produce incorrect results [1.20 backport] #58720
Description
@FiloSottile requested issue #58647 to be considered for backport to the next 1.20 minor release.
@gopherbot please backport. CL 471255 is a security fix.
/cc @golang/security and @golang/release