modulus is even is leaked // through timing side-channels. func NewModulus(b []byte) (*Modulus, error) { n := NewNat().resetToBytes(b) return newModulus(n) } // NewModulusProduct creates a new Modulus from the product of two numbers // represented as big-endian byte slices. The result must be greater than one. // //go:norace func NewModulusProduct(a, b []byte) (*Modulus, error) { x := NewNat().resetToBytes(a) y := NewNat().resetToBytes(b) n := NewNat().reset(len(x.limbs) + len(y.limbs)) for i := range...