specified in FIPS 186-5, Appendix B.2.4 or RFC 6979, // Section 2.3.4. See RFC 6979, Section 3.5 for the rationale. func bits2octets[P Point[P]](c *Curve[P], hash []byte) []byte { e := bigmod.NewNat() hashToNat(c, e, hash) return e.Bytes(c.N) } func signGeneric[P Point[P]](c *Curve[P], priv *PrivateKey, drbg *hmacDRBG, hash []byte) (*Signature, error) { // FIPS 186-5, Section 6.4.1 k, R, err := randomPoint(c, func(b []byte) error { drbg.Generate(b) return nil }) if err != nil { return nil, err } // kInv...