Figure 2: The last subscript for z is (k-1) for d_k and (k-2) for d_(k-1). Appendix B: s1*=lambda*precomputed_v[rd+1]. num_set_bits \in [1,8]. Appendix D: h^j \geq h^{j-1} ==> h^{j+1} \geq h^j.