of precomputed multiples of G, the canonical // generator. The first p256AffineTable contains multiples of G. The second one // multiples of [2⁶]G, the third one of [2¹²]G, and so on, where each successive // table is the previous table doubled six times. Six is the width of the // sliding window used in ScalarBaseMult, and having each table already // pre-doubled lets us avoid the doublings between windows entirely. This table // aliases into p256PrecomputedEmbed. var p256GeneratorTables *[43]p256AffineTable...