pub fn sk_decode_seeds<P: Params>(sk: &[u8]) -> ([u8; 32], [u8; 32], [u8; 64])
Decode only the seeds (rho, K, tr) from a secret key, without unpacking any polynomial. Returns 128 bytes of stack.