n*bitlen/8 { return ringElement{}, errors.New("mldsa: invalid input length for bitUnpackSlow") } mask := uint32((1 << bitlen) - 1) maxValue := uint32(a + b) var r ringElement var acc uint32 var accBits uint vIdx := 0 for i := range r { for accBits < uint(bitlen) { if vIdx < len(v) { acc |= uint32(v[vIdx]) << accBits vIdx++ accBits += 8 } } w := acc & mask if w > maxValue { return ringElement{}, errors.New("mldsa: coefficient out of range") } r[i] = fieldSubToMontgomery(uint32(b), w) acc >>= bitlen...