generates a new decapsulation key, drawing random bytes from // a DRBG. The decapsulation key must be kept secret. func GenerateKey768() (*DecapsulationKey768, error) { // The actual logic is in a separate function to outline this allocation. dk := &DecapsulationKey768{} return generateKey(dk) } func generateKey(dk *DecapsulationKey768) (*DecapsulationKey768, error) { var d [32]byte drbg.Read(d[:]) var z [32]byte drbg.Read(z[:]) kemKeyGen(dk, &d, &z) if err := fips140.PCT("ML-KEM PCT", func() error...