Section 4. This has also the // advantage of closely resembling Deterministic ECDSA. Z := make([]byte, len(priv.d)) if err := drbg.ReadWithReader(rand, Z); err != nil { return nil, err } // See https://github.com/cfrg/draft-irtf-cfrg-det-sigs-with-noise/issues/6 // for the FIPS compliance of this method. In short Z is entropy from the // main DRBG, of length 3/2 of security_strength, so the nonce is optional // per SP 800-90Ar1, Section 8.6.7, and the rest is a personalization // string, which per SP 800-90Ar1,...