https://go.dev/issue/66826. for i := 0; i < 256; i += 2 { a0, a1 := f[i], f[i+1] b0, b1 := g[i], g[i+1] h[i] = fieldAddMul(a0, b0, fieldMul(a1, b1), gammas[i/2]) h[i+1] = fieldAddMul(a0, b1, a1, b0) } return h } // zetas are the values ζ^BitRev7(k) mod q for each index k, according to FIPS // 203, Appendix A. var zetas = [128]fieldElement{1, 1729, 2580, 3289, 2642, 630, 1897, 848, 1062, 1919, 193, 797, 2786, 3260, 569, 1746, 296, 2447, 1339, 1476, 3046, 56, 2240, 1333, 1426, 2094, 535, 2882, 2393, 2879, 1974, 821,...