H.Reset() H.Write(nonce) H.Write(counter) v := make([]byte, (p.γ1+1)*n/8, (maxγ1+1)*n/8) H.Read(v) y[r] = bitUnpack(v, p) } // w = NTT⁻¹(Â ∘ NTT(y)) yHat := make([]nttElement, l, maxL) for i := range y { yHat[i] = ntt(y[i]) } w := make([]ringElement, k, maxK) for i := range w { var wHat nttElement for j := range l { wHat = polyAdd(wHat, nttMul(A[i*l+j], yHat[j])) } w[i] = inverseNTT(wHat) } H.Reset() H.Write(μ[:]) for i := range w { w1Encode(H, highBits(w[i], p), p) } ch := make([]byte, p.λ/4, maxλ/4)...

0461          ; valid                                  # 1.1  CYRILLIC SMALL LETTER OMEGA
0462          ; mapped                 ; 0463          # 1.1  CYRILLIC CAPITAL LETTER YAT
0463          ; valid                                  # 1.1  CYRILLIC SMALL LETTER YAT
0464          ; mapped                 ; 0465          # 1.1  CYRILLIC CAPITAL LETTER IOTIFIED E

AAc,GAEzC5gB,KAAK4gB,YAAcrgB,GAAS,IAAO,IAwhD/CmmB,GAAMqE,MArhDN,WACI,OACI/qB,KAAK4gB,YAAc5gB,KAAKshB,QAAQ5V,MAAM,GAAGkV,aACzC5gB,KAAK4gB,YAAc5gB,KAAKshB,QAAQ5V,MAAM,GAAGkV,aAmhDjD8F,GAAM4C,QAz/CN,WACI,QAAOtpB,KAAK4D,YAAa5D,KAAK0F,QAy/ClCghB,GAAMsE,YAt/CN,WACI,QAAOhrB,KAAK4D,WAAY5D,KAAK0F,QAs/CjCghB,GAAM/E,MAAQA,GACd+E,GAAM5H,MAAQ6C,GACd+E,GAAMuE,SAzFN,WACI,OAAOjrB,KAAK0F,OAAS,MAAQ,IAyFjCghB,GAAMwE,SAtFN,WACI,OAAOlrB,KAAK0F,OAAS,6BAA+B,IAsFxDghB,GAAMyE,MAAQ9kB,EACV,kDACAggB,IAEJK,GAAM7X,OAASxI,EA...