crypto/openssl/crypto/ml_dsa/ml_dsa_key_compress.c

137

uint32_t r = reduce_once(r_plus_z + ct0);

crypto/openssl/crypto/ml_dsa/ml_dsa_local.h

130

return reduce_once(ML_DSA_Q + a - b);

crypto/openssl/crypto/ml_dsa/ml_dsa_ntt.c

146

p->coeff[j] = reduce_once(w_even + t_odd);

crypto/openssl/crypto/ml_dsa/ml_dsa_ntt.c

184

p->coeff[j] = reduce_once(odd + even);

crypto/openssl/crypto/ml_dsa/ml_dsa_ntt.c

99

return reduce_once(c); /* 0..q */

crypto/openssl/crypto/ml_dsa/ml_dsa_poly.h

39

out->coeff[i] = reduce_once(lhs->coeff[i] + rhs->coeff[i]);

crypto/openssl/crypto/ml_kem/ml_kem.c

1100

*curr = reduce_once(*curr + (mask & half_q_plus_1)); \

crypto/openssl/crypto/ml_kem/ml_kem.c

812

return reduce_once(remainder);

crypto/openssl/crypto/ml_kem/ml_kem.c

852

*peer++ = reduce_once(even - odd + kPrime);

crypto/openssl/crypto/ml_kem/ml_kem.c

853

*curr++ = reduce_once(odd + even);

crypto/openssl/crypto/ml_kem/ml_kem.c

885

*curr++ = reduce_once(odd + even);

crypto/openssl/crypto/ml_kem/ml_kem.c

898

lhs->c[i] = reduce_once(lhs->c[i] + rhs->c[i]);

crypto/openssl/crypto/ml_kem/ml_kem.c

907

lhs->c[i] = reduce_once(lhs->c[i] - rhs->c[i] + kPrime);