coefficients of s₂ + k × n × 13-bit coefficients of t₀ return 32 + 32 + 64 + l*n*ηBitlen/8 + k*n*ηBitlen/8 + k*n*13/8 } // TestingOnlyNewPrivat creates a PrivateKey from a // semi-expanded private key encoding, for testing purposes. It rejects // inconsistent keys. // // [PrivateKey.Bytes] must NOT be called on the resulting key, as it will // produce a random value. func TestingOnlyNewPrivat(sk []byte) (*PrivateKey, error) { var p parameters switch len(sk) { case semiExpandedPrivKeyS(params44): p = params44...