io.Reader) (*PrivateKey, error) { fips140.RecordApproved() k, Q, err := randomPoint(c, func(b []byte) error { return drbg.ReadWithReader(rand, b) }) if err != nil { return nil, err } priv := &PrivateKey{ pub: PublicKey{ curve: c.curve, q: Q.Bytes(), }, d: k.Bytes(c.N), } if err := fipsPCT(c, priv); err != nil { // This clearly can't happen, but FIPS 140-3 mandates that we check it. panic(err) } return priv, nil } // randomPoint returns a random scalar and the corresponding point using a // procedure...