No paranthesis here. Also, can you add a comment specifying that this is required by FIPS? (Maybe this logic should go in the `verifier()` method?