fieldElement { x := uint64(a) * uint64(b) x += uint64(c) * uint64(d) return fieldMontgomeryReduc(x) } const n = 256 // ringElement is a polynomial, an element of R_q. type ringElement [n]fieldElement // polyAdd adds two ringElements or nttElements. func polyAdd[T ~[n]fieldElement](a, b T) (s T) { for i := range s { s[i] = fieldAdd(a[i], b[i]) } return s } // polySub subtracts two ringElements or nttElements. func polySub[T ~[n]fieldElement](a, b T) (s T) { for i := range s { s[i] = fieldSub(a[i], b[i])...

* q / 2¹¹ + 1 = 3328, so it didn't overflow. return fieldElement(quotient) } // ringElement is a polynomial, an element of R_q, represented as an array // according to FIPS 203, Section 2.4.4. type ringElement [n]fieldElement // polyAdd adds two ringElements or nttElements. func polyAdd[T ~[n]fieldElement](a, b T) (s T) { for i := range s { s[i] = fieldAdd(a[i], b[i]) } return s } // polySub subtracts two ringElements or nttElements. func polySub[T ~[n]fieldElement](a, b T) (s T) { for i := range...