urvey.pdf // for more details about attacks on small d values. // // Likewise, the leakage of the magnitude of d is not adaptive. if priv.d.BitLenVarTime() <= N.BitLen()/2 { return errors.New("crypto/rsa: d too small") } // If the key is still in scope for FIPS mode, perform a Pairwise // Consistency Test. if priv.fipsApproved { if err := fips140.PCT("RSA sign and verify PCT", func() error { hash := []byte{ 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,...