k, l, η := priv.pub.p.k, priv.pub.p.l, priv.pub.p.η sk := make([]byte, 0, semiExpandedPrivKeyS(priv.pub.p)) sk = append(sk, priv.pub.raw[:32]...) // ρ sk = append(sk, priv.k[:]...) // K sk = append(sk, priv.pub.tr[:]...) // tr for i := range l { sk = bitPackSlow(sk, inverseNTT(priv.s1[i]), η, η) } for i := range k { sk = bitPackSlow(sk, inverseNTT(priv.s2[i]), η, η) } const bound = 1 << (13 - 1) // 2^(d-1) for i := range k { sk = bitPackSlow(sk, inverseNTT(priv.t0[i]), bound-1, bound) } return sk...

e&hzhziropaz?nvir?t??f&i?ni,?g&l?ro??hk?i&stvinrehc?ykstyn&lemhk?vypork???k&c?m?s&na&gul?hul??t&enod?ul??v&iknarf-onavi?orteporp&end?ind?????l&iponret?opotsa&bes?ves??p??m&k?oc?s?yrk??n&c?d?i?osrehk?v?ylov??o&c,nvor??p&d?p,z??r&c?imotihz?k?ymotyhz??sk?t&en?l?z??ude?v:c?e&alokin?ik??i&alokym?hinrehc?krahk?vl?yk??k?l?o&g!inrehc??krahk??r?,xc,y&ikstinlemhk?mus?s&akrehc?sakrehc?tvonrehc???z&ib,u????v!aj?bb?et?iv??waniko?x&a?iacal??yogan?z&.&bew?c&a?i&n?rga???gro?l&im?oohcs??m&on?t??o&c?gn??radnorg?s...