Inputs_bytes
unsigned char s[Inputs_bytes];
Hash_prefix(x,3,r,Inputs_bytes);
unsigned char x[Inputs_bytes+Hash_bytes];
for (i = 0;i < Inputs_bytes;++i) x[i] = r[i];
for (i = 0;i < Hash_bytes;++i) x[Inputs_bytes+i] = cache[i];
Hash_prefix(x,3,y,Inputs_bytes);
unsigned char x[Inputs_bytes+Ciphertexts_bytes+Confirm_bytes];
for (i = 0;i < Inputs_bytes;++i) x[i] = y[i];
for (i = 0;i < Ciphertexts_bytes+Confirm_bytes;++i) x[Inputs_bytes+i] = z[i];
randombytes(sk,Inputs_bytes); sk += Inputs_bytes;
unsigned char r_enc[Inputs_bytes];
const unsigned char *cache = rho + Inputs_bytes;
unsigned char r_enc[Inputs_bytes];
for (i = 0;i < Inputs_bytes;++i) r_enc[i] ^= mask&(r_enc[i]^rho[i]);
for (i = 0;i < Inputs_bytes;++i) s[i] = 0;
unsigned char s[Inputs_bytes];