0xf6, 0x3b, 0xce, 0x3c, 0x3e, 0x27, 0xd2, 0x60, 0x4b}) }) return _p256B } // p256Polynomial sets y2 to x³ - 3x + b, and returns y2. func p256Polynomial(y2, x *fiat.P256Element) *fiat.P256Element { y2.Square(x) y2.Mul(y2, x) threeX := new(fiat.P256Element).Add(x, x) threeX.Add(threeX, x) y2.Sub(y2, threeX) return y2.Add(y2, p256B()) } func p256CheckOnCurve(x, y *fiat.P256Element) error { // y² = x³ - 3x + b rhs := p256Polynomial(new(fiat.P256Element), x) lhs := new(fiat.P256Element).Square(y) if rhs.Equal(lhs)...