pub fn order_l_digits() -> [b17; 15]
l in fifteen 17-bit digits: the digits of c plus 2^252, which is bit 14 of digit 14 (252 = 14 * 17 + 14).
l
c
2^252
252 = 14 * 17 + 14