ML_DSA_K_BYTES
uint8_t expanded_seed[ML_DSA_RHO_BYTES + ML_DSA_PRIV_SEED_BYTES + ML_DSA_K_BYTES];
uint8_t K[ML_DSA_K_BYTES]; /* Private random seed for signing */