errors.New("ecdsa: private key does not match curve") } fips140.RecordApproved() fipsSelfTestDetermin() drbg := newDRBG(h, priv.d, bits2octets(c, hash), nil) // RFC 6979, Section 3.3 return sign(c, priv, drbg, hash) } // bits2octets as specified in FIPS 186-5, Appendix B.2.4 or RFC 6979, // Section 2.3.4. See RFC 6979, Section 3.5 for the rationale. func bits2octets[P Point[P]](c *Curve[P], hash []byte) []byte { e := bigmod.NewNat() hashToNat(c, e, hash) return e.Bytes(c.N) } func signGeneric[P Point[P]](c...