return nil, errors.New("crypto/rsa: p is even") } pMinusTwo := p.Nat().SubOne(p).SubOne(p).Bytes(p) qInv := bigmod.NewNat().Mod(q.Nat(), p) qInv.Exp(qInv, pMinusTwo, p) pk := &PrivateKey{ pub: PublicKey{ N: n, E: e, }, d: d, p: p, q: q, dP: dP, dQ: dQ, qInv: qInv, } if err := checkPrivateKey(pk); err != nil { return nil, err } return pk, nil } // NewPrivateKeyWithPre creates a new RSA private key from the given // parameters, which include precomputed CRT values. func NewPrivateKeyWithPre(N []byte, e...