Number-theoretic transform