constant_time_select_32
x[0].limb[i] = constant_time_select_32(is_z, z[0].limb[i],
return constant_time_select_32(constant_time_lt_32(x, ML_DSA_Q), x, x - ML_DSA_Q);
return constant_time_select_32(constant_time_lt_32(x, 0x80000000), x, 0u - x);
return constant_time_select_32(constant_time_lt_32(ML_DSA_Q_MINUS1_DIV2, x),
static ossl_inline uint32_t constant_time_select_32(uint32_t mask, uint32_t a,
if (!TEST_true(constant_time_select_32(CONSTTIME_TRUE_32, a, b) == a))
if (!TEST_true(constant_time_select_32(CONSTTIME_FALSE_32, a, b) == b))