func crypto/internal/fips140/mldsa.nttMul

9 uses

	crypto/internal/fips140/mldsa (current package)
		field.go#L291: func nttMul(a, b nttElement) (p nttElement) {
		mldsa.go#L203: 			tHat[i] = polyAdd(tHat[i], nttMul(A[i*l+j], s1[j]))
		mldsa.go#L472: 				wHat = polyAdd(wHat, nttMul(A[i*l+j], yHat[j]))
		mldsa.go#L491: 			cs1[i] = inverseNTT(nttMul(c, s1[i]))
		mldsa.go#L495: 			cs2[i] = inverseNTT(nttMul(c, s2[i]))
		mldsa.go#L525: 			ct0[i] = inverseNTT(nttMul(c, t0[i]))
		mldsa.go#L687: 			wHat = polyAdd(wHat, nttMul(A[i*l+j], zHat[j]))
		mldsa.go#L689: 		wHat = polySub(wHat, nttMul(c, t1Hat[i]))
		semiexpanded.go#L97: 			tHat = polyAdd(tHat, nttMul(A[i*l+j], priv.s1[j]))