pub fn decaps(dk: &[u8], c: &[u8]) -> [u8; 32]
ML-KEM.Decaps(dk, c) → shared secret, with the Fujisaki-Okamoto implicit reject.