Home
last modified time | relevance | path

Searched refs:ML_DSA_Q (Results 1 – 4 of 4) sorted by relevance

/freebsd/crypto/openssl/crypto/ml_dsa/
H A Dml_dsa_local.h18 #define ML_DSA_Q 8380417 /* The modulus is 23 bits (2^23 - 2^13 + 1) */ macro
19 #define ML_DSA_Q_MINUS1_DIV2 ((ML_DSA_Q - 1) / 2)
55 #define ML_DSA_GAMMA2_Q_MINUS1_DIV32 ((ML_DSA_Q - 1) / 32)
56 #define ML_DSA_GAMMA2_Q_MINUS1_DIV88 ((ML_DSA_Q - 1) / 88)
114 return constant_time_select_32(constant_time_lt_32(x, ML_DSA_Q), x, x - ML_DSA_Q); in reduce_once()
130 return reduce_once(ML_DSA_Q + a - b); in mod_sub()
149 ML_DSA_Q - x, x); in abs_mod_prime()
H A Dml_dsa_ntt.c96 uint64_t b = a + t * ML_DSA_Q; /* a - t * q */ in reduce_montgomery()
178 const uint32_t step_root = ML_DSA_Q - zetas_montgomery[step + (step - 1 - i)]; in ossl_ml_dsa_poly_ntt_inverse()
186 * (uint64_t)(ML_DSA_Q + even - odd)); in ossl_ml_dsa_poly_ntt_inverse()
H A Dml_dsa_key_compress.c92 *r0 -= (((int32_t)ML_DSA_Q_MINUS1_DIV2 - *r0) >> 31) & (int32_t)ML_DSA_Q; in ossl_ml_dsa_key_compress_decompose()
165 if (gamma2 == ((ML_DSA_Q - 1) / 32)) { in ossl_ml_dsa_key_compress_use_hint()
H A Dml_dsa_sample.c52 return *out < ML_DSA_Q; in coeff_from_three_bytes()