RHO_LEN
static void rej_ntt_poly(struct mldsa_ring_elem *out, const u8 rho[RHO_LEN],
shake_update(shake, rho, RHO_LEN);
const u8 *t1_encoded = &pk[RHO_LEN]; /* Next encoded element of t_1 */