scalar_decode
scalar_decode(&v, ciphertext + compressed_vector_size(rank), v_bits);
if (!scalar_decode(&out[i], in + i * bits * DEGREE / 8,