Recovery ids other than 0 or 1?

[scnale]

Hey, I was wondering if recovery IDs for ECDSA signatures other than 0 or 1 are supported. Here, the recovery id is restricted to 0 or 1. However, the signing logic can generate recovery IDs 2 and 3 as I understand here. Is there something I am missing in how these would be treated?

From what little I've read, these other IDs are quite rare. I don't know if there are any readily available tests for these cases.

[paulmillr]

I think 2/3 only possible for CURVE.n <= r < CURVE.p, which almost never happens.

It would be good to support it, but it's not a huge concern.