out of range", x, gotR1) } default: t.Fatalf("unsupported denγ2: %d", p.γ2) } if uint32(gotR1) != r1 { t.Fatalf("highBits(%d) = %d, expected %d", x, gotR1, r1) } if gotR0 != r0 { t.Fatalf("lowBits(%d) = %d, expected %d", x, gotR0, r0) } } } func TestZetas(t *testing.T) { ζ := big.NewInt(1753) q := big.NewInt(q) for k, zeta := range zetas { // ζ^BitRev₈(k) mod q exp := new(big.Int).Exp(ζ, big.NewInt(int64(BitRev8(uint8(k)))), q) got := fieldFromMontgomery(zeta) if big.NewInt(int64(got)).Cmp(exp) !=...