kh.Write([]byte(context)) } kh.Write(R.Bytes()) kh.Write(priv.pub[:]) kh.Write(message) hramDigest := make([]byte, 0, sha512Size) hramDigest = kh.Sum(hramDigest) k, err := edwards25519.NewScalar().SetUniformBytes(hramDigest) if err != nil { panic("ed25519: internal error: setting scalar failed") } S := edwards25519.NewScalar().MultiplyAdd(k, &priv.s, r) copy(signature[:32], R.Bytes()) copy(signature[32:], S.Bytes()) return signature } func Verify(pub *PublicKey, message, sig []byte) error { return verify(pub,...