fips140.RecordApproved() if l := len(seed); l != seedSize { return nil, errors.New("ed25519: bad seed length: " + strconv.Itoa(l)) } copy(priv.seed[:], seed) precomputePrivateKey(priv) if err := fipsPCT(priv); err != nil { // This clearly can't happen, but FIPS 140-3 requires that we check. panic(err) } return priv, nil } func precomputePrivateKey(priv *PrivateKey) { hs := sha512.New() hs.Write(priv.seed[:]) h := hs.Sum(make([]byte, 0, sha512Size)) s, err := priv.s.SetBytesWithClamping(h[:32]) if err...