func crypto/internal/fips140/mlkem.nttMul

9 uses

	crypto/internal/fips140/mlkem (current package)
		field.go#L427: func nttMul(f, g nttElement) nttElement {
		mlkem1024.go#L241: 			t[i] = polyAdd(t[i], nttMul(A[i*k1024+j], s[j]))
		mlkem1024.go#L375: 			uHat = polyAdd(uHat, nttMul(ex.a[j*k1024+i], r[j]))
		mlkem1024.go#L384: 		vNTT = polyAdd(vNTT, nttMul(ex.t[i], r[i]))
		mlkem1024.go#L452: 		mask = polyAdd(mask, nttMul(dx.s[i], ntt(u[i])))
		mlkem768.go#L300: 			t[i] = polyAdd(t[i], nttMul(A[i*k+j], s[j]))
		mlkem768.go#L434: 			uHat = polyAdd(uHat, nttMul(ex.a[j*k+i], r[j]))
		mlkem768.go#L443: 		vNTT = polyAdd(vNTT, nttMul(ex.t[i], r[i]))
		mlkem768.go#L511: 		mask = polyAdd(mask, nttMul(dx.s[i], ntt(u[i])))