ML_DSA_Q_MINUS1_DIV2
*r0 -= (((int32_t)ML_DSA_Q_MINUS1_DIV2 - *r0) >> 31) & (int32_t)ML_DSA_Q;
return constant_time_select_32(constant_time_lt_32(ML_DSA_Q_MINUS1_DIV2, x),