FIPS mode, it // uses an SP 800-90A Rev. 1 Deterministic Random Bit Generator (DRBG). // Otherwise, it uses the operating system's random number generator. func Read(b []byte) { if testingReader != nil { fips140.RecordNonApproved() // Avoid letting b escape in the non-testing case. bb := make([]byte, len(b)) testingReader.Read(bb) copy(b, bb) return } if !fips140.Enabled { sysrand.Read(b) return } // At every read, 128 random bits from the operating system are mixed as // additional input, to make the...

"errors" "sync" ) func fipsPCT(k *PrivateKey) { fips140.PCT("Ed25519 sign and verify PCT", func() error { return pairwiseTest(k) }) } // pairwiseTest needs to be a top-level function declaration to let the calls // inline and their allocations not escape. func pairwiseTest(k *PrivateKey) error { msg := []byte("PCT") sig := Sign(k, msg) // Note that this runs pub.a.SetBytes. If we wanted to make key generation // in FIPS mode faster, we could reuse A from GenerateKey. But another thing // that could...