inverseNTT(nttMul(c, s1[i])) } cs2 := make([]ringElement, k, maxK) for i := range cs2 { cs2[i] = inverseNTT(nttMul(c, s2[i])) } z := make([]ringElement, l, maxL) for i := range y { z[i] = polyAdd(y[i], cs1[i]) // Reject if ||z||∞ ≥ γ1 − β if coefficientsExceedBo(z[i], γ1β) { if testingOnlyRejection != nil { testingOnlyRejection("z") } continue sign } } for i := range w { r0 := polySub(w[i], cs2[i]) // Reject if ||LowBits(r0)||∞ ≥ γ2 − β if lowBitsExceedBound(r0, γ2β, p) { if testingOnlyRejection !=...