(step 2 of the encapsulation key check from // FIPS 203, Section 7.2) is performed by polyByteDecode in parseEK1024. fips140.RecordApproved() return kemEncaps1024(cc, ek, &m) } // EncapsulateInternal is a derandomized version of Encapsulate, exclusively for // use in tests. func (ek *EncapsulationKey1024) EncapsulateInternal(m *[32]byte) (sharedKey, ciphertext []byte) { cc := &[CiphertextSize1024]byte{} return kemEncaps1024(cc, ek, m) } // kemEncaps1024 generates a shared key and an associated ciphertext....