err != nil { return nil, err } // See https://github.com/cfrg/draft-irtf-cfrg-det-sigs-with-noise/issues/6 // for the FIPS compliance of this method. In short Z is entropy from the // main DRBG, of length 3/2 of security_strength, so the nonce is optional // per SP 800-90Ar1, Section 8.6.7, and the rest is a personalization // string, which per SP 800-90Ar1, Section 8.7.1 may contain secret // information. drbg := newDRBG(h, Z, nil, blockAlignedPersonal{priv.d, bits2octets(c, hash)}) return sign(c,...