FALCON with message recovery, a specification. - Felix Gunther; Vadim Lyubashevsky; Rolfe Schmidt (IACR Cryptol. ePrint Arch., 2026)