const crypto/internal/fips140/mlkem.k

23 uses

	crypto/internal/fips140/mlkem (current package)
		mlkem768.go#L57: 	k = 3
		mlkem768.go#L59: 	CiphertextSize768       = k*encodingSize10 + encodingSize4
		mlkem768.go#L60: 	EncapsulationKeySize768 = k*encodingSize12 + 32
		mlkem768.go#L61: 	decapsulationKeySize768 = k*encodingSize12 + EncapsulationKeySize768 + 32 + 32
		mlkem768.go#L157: 	t [k]nttElement     // ByteDecode₁₂(ek[:384k])
		mlkem768.go#L158: 	a [k * k]nttElement // A[i*k+j] = sampleNTT(ρ, j, i)
		mlkem768.go#L163: 	s [k]nttElement // ByteDecode₁₂(dk[:decryptionKeySize])
		mlkem768.go#L272: 	g.Write([]byte{k}) // Module dimension as a domain separator.
		mlkem768.go#L278: 	for i := byte(0); i < k; i++ {
		mlkem768.go#L279: 		for j := byte(0); j < k; j++ {
		mlkem768.go#L280: 			A[i*k+j] = sampleNTT(ρ, j, i)
		mlkem768.go#L290: 	e := make([]nttElement, k)
		mlkem768.go#L300: 			t[i] = polyAdd(t[i], nttMul(A[i*k+j], s[j]))
		mlkem768.go#L403: 	for i := byte(0); i < k; i++ {
		mlkem768.go#L404: 		for j := byte(0); j < k; j++ {
		mlkem768.go#L405: 			ek.a[i*k+j] = sampleNTT(ek.ρ[:], j, i)
		mlkem768.go#L418: 	r, e1 := make([]nttElement, k), make([]ringElement, k)
		mlkem768.go#L429: 	u := make([]ringElement, k) // NTT⁻¹(AT ◦ r) + e1
		mlkem768.go#L434: 			uHat = polyAdd(uHat, nttMul(ex.a[j*k+i], r[j]))
		mlkem768.go#L500: 	u := make([]ringElement, k)
		mlkem768.go#L506: 	b := (*[encodingSize4]byte)(c[encodingSize10*k:])