re(c[:], c1), Kout, Kprime) return Kout } // pkeDecrypt decrypts a ciphertext. // // It implements K-PKE.Decrypt according to FIPS 203, Algorithm 15, // although s is retained from kemKeyGen. func pkeDecrypt(dx *decryptionKey, c *[CiphertextSize768]byte) []byte { u := make([]ringElement, k) for i := range u { b := (*[encodingSize10]byte)(c[encodingSize10*i : encodingSize10*(i+1)]) u[i] = ringDecodeAndDecompr(b) } b := (*[encodingSize4]byte)(c[encodingSize10*k:]) v := ringDecodeAndDecompr(b) var mask...