size for P-521. return 3, 80, true } return 0, 0, false // A mismatch } func hashToBytes[P Point[P]](c *Curve[P], hash []byte) []byte { e := bigmod.NewNat() hashToNat(c, e, hash) return e.Bytes(c.N) } // randomScalar is a copy of [randomPoint] that doesn't call ScalarBaseMult. func randomScalar[P Point[P]](c *Curve[P], generate func([]byte) error) (k *bigmod.Nat, err error) { for { b := make([]byte, c.N.Size()) if err := generate(b); err != nil { return nil, err } if excess := len(b)*8 - c.N.BitLen();...