range l { length := n * bits.Len(uint(η)*2) / 8 s1[i], err = bitUnpackSlow(sk[:length], η, η) if err != nil { return } sk = sk[length:] } s2 = make([]ringElement, k) for i := range k { length := n * bits.Len(uint(η)*2) / 8 s2[i], err = bitUnpackSlow(sk[:length], η, η) if err != nil { return } sk = sk[length:] } const bound = 1 << (13 - 1) // 2^(d-1) t0 = make([]ringElement, k) for i := range k { length := n * 13 / 8 t0[i], err = bitUnpackSlow(sk[:length], bound-1, bound) if err != nil { return } sk =...