lib/crypto/mldsa.c
153
struct mldsa_ring_elem a;
lib/crypto/mldsa.c
154
struct mldsa_ring_elem t1_scaled;
lib/crypto/mldsa.c
157
struct mldsa_ring_elem c;
lib/crypto/mldsa.c
159
struct mldsa_ring_elem tmp;
lib/crypto/mldsa.c
164
struct mldsa_ring_elem z[/* l */];
lib/crypto/mldsa.c
224
static void ntt(struct mldsa_ring_elem *w)
lib/crypto/mldsa.c
249
static void invntt_and_mul_2_32(struct mldsa_ring_elem *w)
lib/crypto/mldsa.c
288
static const u8 *decode_t1_elem(struct mldsa_ring_elem *out,
lib/crypto/mldsa.c
313
static bool decode_z(struct mldsa_ring_elem z[/* l */], int l, s32 gamma1,
lib/crypto/mldsa.c
386
static void sample_in_ball(struct mldsa_ring_elem *c, const u8 *seed,
lib/crypto/mldsa.c
396
*c = (struct mldsa_ring_elem){};
lib/crypto/mldsa.c
414
static void rej_ntt_poly(struct mldsa_ring_elem *out, const u8 rho[RHO_LEN],
lib/crypto/mldsa.c
484
static __always_inline void use_hint_elem(struct mldsa_ring_elem *w,
lib/crypto/mldsa.c
506
const struct mldsa_ring_elem *w1, int k)
lib/crypto/mldsa.c
596
ws->tmp = (struct mldsa_ring_elem){};