Curve

y² = x³ + 7
Pedagogical model of y² = x³ + 7. Scatter is capped; field order steps to 256-bit secp256k1.