errors.New("ed25519: bad public key") } copy(pub.aBytes[:], pubBytes) return pub, nil } // Domain separation prefixes used to disambiguate Ed25519/Ed25519ph/Ed25519ctx. // See RFC 8032, Section 2 and Section 5.1. const ( // domPrefixPure is empty for pure Ed25519. domPrefixPure = "" // domPrefixPh is dom2(phflag=1) for Ed25519ph. It must be followed by the // uint8-length prefixed context. domPrefixPh = "SigEd25519 no Ed25519 collisions\x01" // domPrefixCtx is dom2(phflag=0) for Ed25519ctx. It must...