whether x is all zeroes in constant time. func isZero(x []byte) bool { var acc byte for _, b := range x { acc |= b } return acc == 0 } // isLess reports whether a < b, where a and b are big-endian buffers of the // same length and shorter than 72 bytes. func isLess(a, b []byte) bool { if len(a) != len(b) { panic("crypto/ecdh: internal error: mismatched isLess inputs") } // Copy the values into a fixed-size preallocated little-endian buffer. // 72 bytes is enough for every scalar in this package,...