func crypto/internal/fips140/mlkem.inverseNTT
7 uses
crypto/internal/fips140/mlkem (current package)
field.go#L469: func inverseNTT(f nttElement) ringElement {
mlkem1024.go#L378: u[i] = polyAdd(u[i], inverseNTT(nttMul(ex.a[j*k1024+i], r[j])))
mlkem1024.go#L388: v := polyAdd(polyAdd(inverseNTT(vNTT), e2), μ)
mlkem1024.go#L455: w := polySub(v, inverseNTT(mask))
mlkem768.go#L437: u[i] = polyAdd(u[i], inverseNTT(nttMul(ex.a[j*k+i], r[j])))
mlkem768.go#L447: v := polyAdd(polyAdd(inverseNTT(vNTT), e2), μ)
mlkem768.go#L514: w := polySub(v, inverseNTT(mask))