rr, _ := fieldToMontgomery(x) r1, r0 := SpecDecompose(rr, p) // Check that SpecDecompose is correct. // r ≡ r1 * (2 * γ2) + r0 mod q γ2 := (q - 1) / uint32(p.γ2) reconstructed := reduceModQ(int32(r1*2*γ2) + r0) if reconstructed != x { t.Fatalf("SpecDecompose(%d) = (%d, %d), which reconstructs to %d, expected %d", x, r1, r0, reconstructed, x) } var gotR1 byte var gotR0 int32 switch p.γ2 { case 88: gotR1, gotR0 = decompose88(rr) if gotR1 > 43 { t.Fatalf("decompose88(%d) returned r1 = %d, which is out...