pub fn pack_ciphertext_to_fields(ciphertext: &[u8; 208]) -> [U256; 7]
Pack 208-byte ciphertext into 7 field elements (LE, 31+31+31+31+31+31+22).