privBytes[:32]) hs := sha512.New() hs.Write(priv.seed[:]) h := hs.Sum(make([]byte, 0, sha512Size)) if _, err := priv.s.SetBytesWithClamping(h[:32]); err != nil { panic("ed25519: internal error: setting scalar failed") } // Note that we are not decompressing the public key point here, // because it takes > 20% of the time of a signature generation. // Signing doesn't use it as a point anyway. copy(priv.pub[:], privBytes[32:]) copy(priv.prefix[:], h[32:]) return priv, nil } func NewPublicKey(pub []byte)...