bitUnpack(v []byte, p parameters) ringElement { switch p.γ1 { case 17: return bitUnpack18(v) case 19: return bitUnpack20(v) default: panic("mldsa: internal error: unsupported γ1") } } // bitUnpack18 implements BitUnpack(v, 2¹⁷-1, 2¹⁷), which unpacks each 18 bits // in little-endian into a coefficient in [-2¹⁷+1, 2¹⁷]. func bitUnpack18(v []byte) ringElement { if len(v) != 18*n/8 { panic("mldsa: internal error: invalid bitUnpack18 input length") } const b = 1 << 17 const mask18 = 1<<18 - 1 var r ringElement...