in src/integer_arith/scalar.rs [216:223]
fn sample_blw(upper_bound: &Scalar) -> Scalar {
loop {
let n = Self::_sample(upper_bound.bit_count);
if n < upper_bound.rep {
return Scalar::new(n);
}
}
}