≥ γ2 if coefficientsExceedBo(ct0[i], γ2) { if testingOnlyRejection != nil { testingOnlyRejection("ct0") } continue sign } } count1s := 0 h := make([][n]byte, k, maxK) for i := range w { var count int h[i], count = makeHint(ct0[i], w[i], cs2[i], p) count1s += count } // Reject if number of hints > ω if count1s > p.ω { if testingOnlyRejection != nil { testingOnlyRejection("h") } continue sign } return sigEncode(ch, z, h, p) } } // testingOnlyRejection is set in tests, to ensure that all rejection //...

:= bigmod.NewNat().SetBytes(b, c.N); err == nil && k.IsZero() == 0 { p, err := c.newPoint().ScalarBaseMult(k.Bytes(c.N)) return k, p, err } if testingOnlyRejection != nil { testingOnlyRejection() } } } // testingOnlyRejection is called when rejection sampling in // randomPoint rejects a candidate for being higher than the modulus. var testingOnlyRejection func() // Signature is an ECDSA signature, where r and s are represented as big-endian // byte slices of the same length as the curve order. type...