scalar_decode_short
scalar_decode_short(s, ser, C448_SCALAR_BYTES);
scalar_decode_short(t1, &ser[i], ser_len - i);