fromHex("dcc71a421bc6ffafb7df") for b.Loop() { priv, err := NewPrivateKey44(seed) if err != nil { b.Fatalf("NewPrivateKey: %v", err) } sk := TestingOnlyPrivateKe(priv) if sha256.Sum256(sk) != ([32]byte)(skHash) { b.Fatalf("sk hash mismatch, got %x", sha256.Sum256(sk)) } sig, err := SignExternalMuDeterm(priv, μ) if err != nil { b.Fatalf("SignExternalMuDeterm: %v", err) } if sha256.Sum256(sig) != ([32]byte)(sigHash) { b.Fatalf("sig hash mismatch, got %x", sha256.Sum256(sig)) } if err := VerifyExternalMu(priv.PublicKey(),...

for a := uint16(0); a < 1<<bits; a++ { f := decompress(a, bits) if f >= q { t.Fatalf("decompress(%d, %d) = %d >= q", a, bits, f) } got := compress(f, bits) if got != a { t.Fatalf("compress(decompress(%d, %d), %d) = %d", a, bits, bits, got) } } for a := fieldElement(0); a < q; a++ { c := compress(a, bits) if c >= 1<<bits { t.Fatalf("compress(%d, %d) = %d >= 2^bits", a, bits, c) } got := decompress(c, bits) diff := min(a-got, got-a, a-got+q, got-a+q) ceil := q / (1 << bits) if diff > fieldElement(ceil)...