computePublicKeyHash(pk []byte) [64]byte { H := sha3.NewShake256() H.Write(pk) var tr [64]byte H.Read(tr[:]) return tr } func computeT1Hat(t1Hat []nttElement, t1 [][n]uint16) { for i := range t1 { var w ringElement for j := range t1[i] { // t₁ <= 2¹⁰ - 1 // t₁ ⋅ 2ᵈ <= 2ᵈ(2¹⁰ - 1) = 2²³ - 2¹³ < q = 2²³ - 2¹³ + 1 z, _ := fieldToMontgomery(uint32(t1[i][j]) << 13) w[j] = z } t1Hat[i] = ntt(w) } } func pkEncode(buf []byte, ρ []byte, t1 [][n]uint16, p parameters) []byte { pk := append(buf, ρ...) for _, w := range...