const crypto/internal/fips140/mldsa.n
67 uses
crypto/internal/fips140/mldsa (current package)
field.go#L116: const n = 256
field.go#L119: type ringElement [n]fieldElement
field.go#L122: func polyAdd[T ~[n]fieldElement](a, b T) (s T) {
field.go#L130: func polySub[T ~[n]fieldElement](a, b T) (s T) {
field.go#L138: type nttElement [n]fieldElement
field.go#L310: for j < n {
field.go#L463: func highBits(r ringElement, p parameters) [n]byte {
field.go#L464: var w [n]byte
field.go#L467: for i := range n {
field.go#L471: for i := range n {
field.go#L483: func useHint(r ringElement, h [n]byte, p parameters) [n]byte {
field.go#L484: var w [n]byte
field.go#L487: for i := range n {
field.go#L491: for i := range n {
field.go#L501: func makeHint(ct0, w, cs2 ringElement, p parameters) (h [n]byte, count1s int) {
field.go#L504: for i := range n {
field.go#L509: for i := range n {
field.go#L650: out, v := sliceForAppend(buf, 18*n/8)
field.go#L652: for i := 0; i < n; i += 4 {
field.go#L681: out, v := sliceForAppend(buf, 20*n/8)
field.go#L683: for i := 0; i < n; i += 2 {
field.go#L714: if len(v) != 18*n/8 {
field.go#L720: for i := 0; i < n; i += 4 {
field.go#L737: if len(v) != 20*n/8 {
field.go#L743: for i := 0; i < n; i += 2 {
mldsa.go#L35: return 32 + p.k*n*10/8
mldsa.go#L40: return (p.λ / 4) + p.l*n*(p.γ1+1)/8 + p.ω + p.k
mldsa.go#L46: PublicKeySize44 = 32 + 4*n*10/8
mldsa.go#L47: PublicKeySize65 = 32 + 6*n*10/8
mldsa.go#L48: PublicKeySize87 = 32 + 8*n*10/8
mldsa.go#L50: SignatureSize44 = 128/4 + 4*n*(17+1)/8 + 80 + 4
mldsa.go#L51: SignatureSize65 = 192/4 + 5*n*(19+1)/8 + 55 + 6
mldsa.go#L52: SignatureSize87 = 256/4 + 7*n*(19+1)/8 + 75 + 8
mldsa.go#L213: t1, t0 := make([][n]uint16, k, maxK), priv.t0[:k]
mldsa.go#L246: func computeT1Hat(t1Hat []nttElement, t1 [][n]uint16) {
mldsa.go#L259: func pkEncode(buf []byte, ρ []byte, t1 [][n]uint16, p parameters) []byte {
mldsa.go#L263: for i := 0; i < n; i += 4 {
mldsa.go#L279: func pkDecode(pk []byte, t1 [][n]uint16, p parameters) (ρ []byte, err error) {
mldsa.go#L286: for i := 0; i < n; i += 4 {
mldsa.go#L457: v := make([]byte, (p.γ1+1)*n/8, (maxγ1+1)*n/8)
mldsa.go#L537: h := make([][n]byte, k, maxK)
mldsa.go#L561: func w1Encode(H *sha3.SHAKE, w [n]byte, p parameters) {
mldsa.go#L565: buf := make([]byte, 4*n/8)
mldsa.go#L566: for i := 0; i < n; i += 2 {
mldsa.go#L574: buf := make([]byte, 6*n/8)
mldsa.go#L575: for i := 0; i < n; i += 4 {
mldsa.go#L659: t1 := make([][n]uint16, k, maxK)
mldsa.go#L670: h := make([][n]byte, k, maxK)
mldsa.go#L694: w1 := make([][n]byte, k, maxK)
mldsa.go#L720: func sigEncode(ch []byte, z []ringElement, h [][n]byte, p parameters) []byte {
mldsa.go#L730: func sigDecode(sig []byte, z []ringElement, h [][n]byte, p parameters) (ch []byte, err error) {
mldsa.go#L736: length := (p.γ1 + 1) * n / 8
mldsa.go#L746: func hintEncode(buf []byte, h [][n]byte, p parameters) []byte {
mldsa.go#L751: for j := range n {
mldsa.go#L762: func hintDecode(y []byte, h [][n]byte, p parameters) error {
semiexpanded.go#L29: return 32 + 32 + 64 + l*n*ηBitlen/8 + k*n*ηBitlen/8 + k*n*13/8
semiexpanded.go#L93: t1 := make([][n]uint16, k, maxK)
semiexpanded.go#L100: for j := range n {
semiexpanded.go#L152: length := n * bits.Len(uint(η)*2) / 8
semiexpanded.go#L162: length := n * bits.Len(uint(η)*2) / 8
semiexpanded.go#L173: length := n * 13 / 8
semiexpanded.go#L189: out, v := sliceForAppend(buf, n*bitlen/8)
semiexpanded.go#L214: if len(v) != n*bitlen/8 {