WARNING (1): As this file is being written, no FN-DSA draft has been published yet, and therefore what is implemented here is not the "real" FN-DSA; such a thing does not exist yet. When FN-DSA gets ...

@ Starting at value 11, we only store the low 32 bits.