ML_KEM_PKHASH_BYTES
#define PRVKEY_BYTES(b) (2 * PUBKEY_BYTES(b) + ML_KEM_PKHASH_BYTES)
memcpy(out, key->pkhash, ML_KEM_PKHASH_BYTES);
out += ML_KEM_PKHASH_BYTES;
if (memcmp(key->pkhash, in, ML_KEM_PKHASH_BYTES) != 0) {
in += ML_KEM_PKHASH_BYTES;
uint8_t input[ML_KEM_RANDOM_BYTES + ML_KEM_PKHASH_BYTES];
memcpy(input + ML_KEM_RANDOM_BYTES, key->pkhash, ML_KEM_PKHASH_BYTES);
uint8_t decrypted[ML_KEM_SHARED_SECRET_BYTES + ML_KEM_PKHASH_BYTES];
memcpy(decrypted + ML_KEM_SHARED_SECRET_BYTES, pkhash, ML_KEM_PKHASH_BYTES);
return memcmp(key1->pkhash, key2->pkhash, ML_KEM_PKHASH_BYTES) == 0;
static __owur int hash_h(uint8_t out[ML_KEM_PKHASH_BYTES], const uint8_t *in, size_t len,
&& single_keccak(out, ML_KEM_PKHASH_BYTES, in, len, mdctx);
hash_h_pubkey(uint8_t pkhash[ML_KEM_PKHASH_BYTES],
&& ossl_assert(sz == ML_KEM_PKHASH_BYTES);
#if ML_KEM_PKHASH_BYTES != ML_KEM_RANDOM_BYTES
puboff = prvlen - ML_KEM_RANDOM_BYTES - ML_KEM_PKHASH_BYTES - publen;