operated in FIPS mode) and // returns any errors. If an error is returned, the key must not be used. // // PCTs are mandatory for every key pair that is generated/imported, including // ephemeral keys (which effectively doubles the cost of key establishment). See // Implementation Guidance 10.3.A Additional Comment 1. // // The name must not contain commas, colons, hashes, or equal signs. // // If a package p calls PCT during key generation, an invocation of that // function should be added to fi...