const crypto/internal/fips140/mlkem.k1024

23 uses

	crypto/internal/fips140/mlkem (current package)
		mlkem1024.go#L98: 	t [k1024]nttElement         // ByteDecode₁₂(ek[:384k])
		mlkem1024.go#L99: 	a [k1024 * k1024]nttElement // A[i*k+j] = sampleNTT(ρ, j, i)
		mlkem1024.go#L104: 	s [k1024]nttElement // ByteDecode₁₂(dk[:decryptionKey1024Size])
		mlkem1024.go#L213: 	g.Write([]byte{k1024}) // Module dimension as a domain separator.
		mlkem1024.go#L219: 	for i := byte(0); i < k1024; i++ {
		mlkem1024.go#L220: 		for j := byte(0); j < k1024; j++ {
		mlkem1024.go#L221: 			A[i*k1024+j] = sampleNTT(ρ, j, i)
		mlkem1024.go#L231: 	e := make([]nttElement, k1024)
		mlkem1024.go#L241: 			t[i] = polyAdd(t[i], nttMul(A[i*k1024+j], s[j]))
		mlkem1024.go#L344: 	for i := byte(0); i < k1024; i++ {
		mlkem1024.go#L345: 		for j := byte(0); j < k1024; j++ {
		mlkem1024.go#L346: 			ek.a[i*k1024+j] = sampleNTT(ek.ρ[:], j, i)
		mlkem1024.go#L359: 	r, e1 := make([]nttElement, k1024), make([]ringElement, k1024)
		mlkem1024.go#L370: 	u := make([]ringElement, k1024) // NTT⁻¹(AT ◦ r) + e1
		mlkem1024.go#L375: 			uHat = polyAdd(uHat, nttMul(ex.a[j*k1024+i], r[j]))
		mlkem1024.go#L441: 	u := make([]ringElement, k1024)
		mlkem1024.go#L447: 	b := (*[encodingSize5]byte)(c[encodingSize11*k1024:])
		mlkem768.go#L66: 	k1024 = 4
		mlkem768.go#L68: 	CiphertextSize1024       = k1024*encodingSize11 + encodingSize5
		mlkem768.go#L69: 	EncapsulationKeySize1024 = k1024*encodingSize12 + 32
		mlkem768.go#L70: 	decapsulationKeySize1024 = k1024*encodingSize12 + EncapsulationKeySize1024 + 32 + 32