generated keys (AS10.35) and FIPS 140-3 IG 10.3.A, Additional // Comment 1 goes out of its way to say that "the PCT shall be performed // consistent [...], even if the underlying standard does not require a // PCT". So we do it. And make ECDH nearly 50% slower (only) in FIPS mode. if err := fips140.PCT("ECDH PCT", func() error { p1, err := c.newPoint().ScalarBaseMult(key) if err != nil { return err } if !bytes.Equal(p1.Bytes(), publicKey) { return errors.New("crypto/ecdh: public key does not match private...