b2, b3, b4) } } return pk } func pkDecode(pk []byte, t1 [][n]uint16, p parameters) (ρ []byte, err error) { if len(pk) != pubKeySize(p) { return nil, errInvalidPublicKeyL } ρ, pk = pk[:32], pk[32:] for r := range t1 { // Decode four at a time from 4 * 10 bits = 5 bytes. for i := 0; i < n; i += 4 { b0, b1, b2, b3, b4 := pk[0], pk[1], pk[2], pk[3], pk[4] t1[r][i+0] = uint16(b0>>0) | uint16(b1&0b0000_0011)<<8 t1[r][i+1] = uint16(b1>>2) | uint16(b2&0b0000_1111)<<6 t1[r][i+2] = uint16(b2>>4) | uint16(b3&0b0011_1111)<<4...

n; i += 4 { x := uint64(b[0]) | uint64(b[1])<<8 | uint64(b[2])<<16 | uint64(b[3])<<24 | uint64(b[4])<<32 b = b[5:] f[i] = fieldElement(decompress(uint16(x>>0&0b11_1111_1111), 10)) f[i+1] = fieldElement(decompress(uint16(x>>10&0b11_1111_1111), 10)) f[i+2] = fieldElement(decompress(uint16(x>>20&0b11_1111_1111), 10)) f[i+3] = fieldElement(decompress(uint16(x>>30&0b11_1111_1111), 10)) } return f } // ringCompressAndEncod appends an encoding of a ring element to s, // compressing each coefficient to d...