func crypto/internal/fips140/mlkem.inverseNTT
7 uses
crypto/internal/fips140/mlkem (current package)
field.go#L469: func inverseNTT(f nttElement) ringElement {
mlkem1024.go#L371: u[i] = polyAdd(u[i], inverseNTT(nttMul(ex.a[j*k1024+i], r[j])))
mlkem1024.go#L381: v := polyAdd(polyAdd(inverseNTT(vNTT), e2), μ)
mlkem1024.go#L448: w := polySub(v, inverseNTT(mask))
mlkem768.go#L430: u[i] = polyAdd(u[i], inverseNTT(nttMul(ex.a[j*k+i], r[j])))
mlkem768.go#L440: v := polyAdd(polyAdd(inverseNTT(vNTT), e2), μ)
mlkem768.go#L507: w := polySub(v, inverseNTT(mask))