func crypto/internal/fips140/mldsa.nttMul
9 uses
crypto/internal/fips140/mldsa (current package)
field.go#L291: func nttMul(a, b nttElement) (p nttElement) {
mldsa.go#L203: tHat[i] = polyAdd(tHat[i], nttMul(A[i*l+j], s1[j]))
mldsa.go#L472: wHat = polyAdd(wHat, nttMul(A[i*l+j], yHat[j]))
mldsa.go#L491: cs1[i] = inverseNTT(nttMul(c, s1[i]))
mldsa.go#L495: cs2[i] = inverseNTT(nttMul(c, s2[i]))
mldsa.go#L525: ct0[i] = inverseNTT(nttMul(c, t0[i]))
mldsa.go#L687: wHat = polyAdd(wHat, nttMul(A[i*l+j], zHat[j]))
mldsa.go#L689: wHat = polySub(wHat, nttMul(c, t1Hat[i]))
semiexpanded.go#L97: tHat = polyAdd(tHat, nttMul(A[i*l+j], priv.s1[j]))