const crypto/internal/fips140/mldsa.q
19 uses
crypto/internal/fips140/mldsa (current package)
field.go#L15: q = 8380417 // 2²³ - 2¹³ + 1
field.go#L32: if a >= q {
field.go#L42: x := a - b + q
field.go#L58: return constantTimeSelectLessOrEqual(x, q/2, x, x-q)
field.go#L67: return uint32(constantTimeSelectLessOrEqual(x, q/2, x, q-x))
field.go#L72: x, b := bits.Sub64(uint64(a), uint64(q), 0)
field.go#L73: return fieldElement(x + b*q)
field.go#L84: x := uint32(a - b + q)
field.go#L97: u := (x + uint64(t)*q) >> 32
field.go#L104: x := uint64(a) * uint64(b-c+q)
field.go#L539: r0 = int32(x) - int32(r1)*2*(q-1)/32
field.go#L540: r0 = constantTimeSelectLessOrEqual(q/2+1, r0, r0-q, r0)
field.go#L589: r0 = int32(x) - int32(r1)*2*(q-1)/88
field.go#L590: r0 = constantTimeSelectLessOrEqual(q/2+1, r0, r0-q, r0)
mldsa.go#L428: γ2 := (q - 1) / uint32(p.γ2)