by ByteEncode, according to FIPS 203, Algorithm 5. func ringCompressAndEncod(s []byte, f ringElement, d uint8) []byte { var b byte var bIdx uint8 for i := 0; i < n; i++ { c := compress(f[i], d) var cIdx uint8 for cIdx < d { b |= byte(c>>cIdx) << bIdx bits := min(8-bIdx, d-cIdx) bIdx += bits cIdx += bits if bIdx == 8 { s = append(s, b) b = 0 bIdx = 0 } } } if bIdx != 0 { panic("mlkem: internal error: bitsFilled != 0") } return s } // ringDecodeAndDecompr decodes an encoding of a ring element where...