though. How are we supposed to check they are // consistent without regenerating the public key? Do we even need to check? // Who knows! FIPS 204 says // // > Note that there exist malformed inputs that can cause skDecode to // > return values that are not in the correct range. Hence, skDecode // > should only be run on inputs that come from trusted sources. // // so it sounds like it doesn't even want us to check the coefficients are // within bounds, but especially if using this format for key exchange,...