func crypto/internal/fips140/mldsa.inverseNTT
11 uses
crypto/internal/fips140/mldsa (current package)
field.go#L218: func inverseNTT(f nttElement) ringElement {
mldsa.go#L209: t[i] = inverseNTT(tHat[i])
mldsa.go#L474: w[i] = inverseNTT(wHat)
mldsa.go#L491: cs1[i] = inverseNTT(nttMul(c, s1[i]))
mldsa.go#L495: cs2[i] = inverseNTT(nttMul(c, s2[i]))
mldsa.go#L525: ct0[i] = inverseNTT(nttMul(c, t0[i]))
mldsa.go#L690: w[i] = inverseNTT(wHat)
semiexpanded.go#L99: t := inverseNTT(tHat)
semiexpanded.go#L125: sk = bitPackSlow(sk, inverseNTT(priv.s1[i]), η, η)
semiexpanded.go#L128: sk = bitPackSlow(sk, inverseNTT(priv.s2[i]), η, η)
semiexpanded.go#L132: sk = bitPackSlow(sk, inverseNTT(priv.t0[i]), bound-1, bound)