For the longest time (maybe still true) NIST would not certify Secp256k1.

That's a feature, not a bug. nostr:note1h7s99v40xayw5us2p8hwclrl3ht06whu97vgfmmgyfvgx2kn62msdfe3pz