v.pub.p)) sk = append(sk, priv.pub.raw[:32]...) // ρ sk = append(sk, priv.k[:]...) // K sk = append(sk, priv.pub.tr[:]...) // tr for i := range l { sk = bitPackSlow(sk, inverseNTT(priv.s1[i]), η, η) } for i := range k { sk = bitPackSlow(sk, inverseNTT(priv.s2[i]), η, η) } const bound = 1 << (13 - 1) // 2^(d-1) for i := range k { sk = bitPackSlow(sk, inverseNTT(priv.t0[i]), bound-1, bound) } return sk } func skDecode(sk []byte, p parameters) (ρ, K [32]byte, tr [64]byte, s1, s2, t0 []ringElement, err...