applied to r with coefficients in [−γ₁+1, γ₁], as // guaranteed by the rejection conditions in Sign. func bitPack(b []byte, r ringElement, p parameters) []byte { switch p.γ1 { case 17: return bitPack18(b, r) case 19: return bitPack20(b, r) default: panic("mldsa: internal error: unsupported γ1") } } // bitPack18 implements BitPack(r mod± q, 2¹⁷-1, 2¹⁷), which packs the centered // coefficients of r into little-endian 18-bit chunks. It appends to buf. // // It must only be applied to r with coefficients...