pub fn limbs_to_w256(l: [b85; 4]) -> [b128; 2]
Bits 0..256 of four 85-bit limbs as two 128-bit words.