fieldCenteredMod(r[i+3]) v[6] |= byte(w3 << 6) v[7] = byte(w3 >> 2) v[8] = byte(w3 >> 10) v = v[4*18/8:] } return out } // bitPack20 implements BitPack(r mod± q, 2¹⁹-1, 2¹⁹), which packs the centered // coefficients of r into little-endian 20-bit chunks. It appends to buf. // // It must only be applied to r with coefficients in [−2¹⁹+1, 2¹⁹], as // guaranteed by the rejection conditions in Sign. func bitPack20(buf []byte, r ringElement) []byte { out, v := sliceForAppend(buf, 20*n/8) const b = 1 << 19 for i := 0; i...