form. The seed must be uniformly random. func NewDecapsulationKey1(seed []byte) (*DecapsulationKey1024, error) { // The actual logic is in a separate function to outline this allocation. dk := &DecapsulationKey1024{} return newKeyFromSeed1024(dk, seed) } func newKeyFromSeed1024(dk *DecapsulationKey1024, seed []byte) (*DecapsulationKey1024, error) { if len(seed) != SeedSize { return nil, errors.New("mlkem: invalid seed length") } d := (*[32]byte)(seed[:32]) z := (*[32]byte)(seed[32:]) kemKeyGen1024(dk,...