const crypto/internal/fips140/mlkem.k1024
23 uses
crypto/internal/fips140/mlkem (current package)
mlkem1024.go#L98: t [k1024]nttElement // ByteDecode₁₂(ek[:384k])
mlkem1024.go#L99: a [k1024 * k1024]nttElement // A[i*k+j] = sampleNTT(ρ, j, i)
mlkem1024.go#L104: s [k1024]nttElement // ByteDecode₁₂(dk[:decryptionKey1024Size])
mlkem1024.go#L218: g.Write([]byte{k1024}) // Module dimension as a domain separator.
mlkem1024.go#L224: for i := byte(0); i < k1024; i++ {
mlkem1024.go#L225: for j := byte(0); j < k1024; j++ {
mlkem1024.go#L226: A[i*k1024+j] = sampleNTT(ρ, j, i)
mlkem1024.go#L236: e := make([]nttElement, k1024)
mlkem1024.go#L246: t[i] = polyAdd(t[i], nttMul(A[i*k1024+j], s[j]))
mlkem1024.go#L347: for i := byte(0); i < k1024; i++ {
mlkem1024.go#L348: for j := byte(0); j < k1024; j++ {
mlkem1024.go#L349: ek.a[i*k1024+j] = sampleNTT(ek.ρ[:], j, i)
mlkem1024.go#L362: r, e1 := make([]nttElement, k1024), make([]ringElement, k1024)
mlkem1024.go#L373: u := make([]ringElement, k1024) // NTT⁻¹(AT ◦ r) + e1
mlkem1024.go#L378: u[i] = polyAdd(u[i], inverseNTT(nttMul(ex.a[j*k1024+i], r[j])))
mlkem1024.go#L442: u := make([]ringElement, k1024)
mlkem1024.go#L448: b := (*[encodingSize5]byte)(c[encodingSize11*k1024:])
mlkem768.go#L66: k1024 = 4
mlkem768.go#L68: CiphertextSize1024 = k1024*encodingSize11 + encodingSize5
mlkem768.go#L69: EncapsulationKeySize1024 = k1024*encodingSize12 + 32
mlkem768.go#L70: decapsulationKeySize1024 = k1024*encodingSize12 + EncapsulationKeySize1024 + 32 + 32