BIP341: Clarify tweaking of secret keys

Author: reardencode

bip-0341.mediawiki

@@ -176,6 +176,8 @@ The parity bit will be required for spending the output with a script path.
 In order to allow spending with the key path, we define <code>taproot_tweak_seckey</code> to compute the secret key for a tweaked public key.
 For any byte string <code>h</code> it holds that <code>taproot_tweak_pubkey(pubkey_gen(seckey), h)[1] == pubkey_gen(taproot_tweak_seckey(seckey, h))</code>.
 
+Note that the secret key must be negated, if necessary, to produce an even-y pubkey before applying the tweak.
+
 <source lang="python">
 def taproot_tweak_pubkey(pubkey, h):
     t = int_from_bytes(tagged_hash("TapTweak", pubkey + h))