Correctness of carryless polynomial multiplication #
The product coefficient is a convolution over the two coefficient lists.
Counting the true summands and reducing that count modulo two gives exactly
mulBits, including its high zero padding and empty input cases.