fieldElement) (r1 byte, r0 int32) { x := fieldFromMontgomery(r) r1 = highBits88(x) // r - r1 * (2 * γ2) mod± q r0 = int32(x) - int32(r1)*2*(q-1)/88 r0 = constantTimeSelectLe(q/2+1, r0, r0-q, r0) return r1, r0 } // useHint88 implements UseHint from FIPS 204 for γ2 = (q - 1) / 88. func useHint88(r fieldElement, hint byte) byte { const m = 44 // (q − 1) / (2 * γ2) r1, r0 := decompose88(r) if hint == 1 { if r0 > 0 { // (r1 + 1) mod m, for r1 in [0, m-1] if r1 == m-1 { r1 = 0 } else { r1++ } } else { // (r1...