A uniform polynomial-time generator for sparse binary trinomials #
The generator accepts a unary half-degree and writes all coefficients of
X^(2*d) + X^d + 1. Its input bit values do not matter. The certificate
does not assume irreducibility and is valid uniformly at every input length.
Generating the sparse coefficient list is uniformly polynomial-time.
Rounding the requested half-degree to a power of three preserves polynomial time.