decompose88(r) if hint == 1 { if r0 > 0 { // (r1 + 1) mod m, for r1 in [0, m-1] if r1 == m-1 { r1 = 0 } else { r1++ } } else { // (r1 - 1) % m, for r1 in [0, m-1] if r1 == 0 { r1 = m - 1 } else { r1-- } } } return r1 } // makeHint88 implements MakeHint from FIPS 204 for γ2 = (q - 1) / 88. func makeHint88(ct0, w, cs2 fieldElement) byte { // Same as makeHint32 above. rPlusZ := fieldSub(w, cs2) v1 := highBits88(fieldFromMontgomery(rPlusZ)) r1 := highBits88(fieldFromMontgomery(fieldAdd(rPlusZ, ct0))) return byte(...