1584, 2298, 2037, 3220, 375, 2549, 2090, 1645, 1063, 319, 2773, 757, 2099, 561, 2466, 2594, 2804, 1092, 403, 1026, 1143, 2150, 2775, 886, 1722, 1212, 1874, 1029, 2110, 2935, 885, 2154} // ntt maps a ringElement to its nttElement representation. // // It implements NTT, according to FIPS 203, Algorithm 9. func ntt(f ringElement) nttElement { k := 1 for len := 128; len >= 2; len /= 2 { for start := 0; start < 256; start += 2 * len { zeta := zetas[k] k++ // Bounds check elimination hint. f, flen := f[start:start+len],...