| /freebsd/crypto/openssl/crypto/ml_dsa/ |
| H A D | ml_dsa_key_compress.c | 62 uint32_t ossl_ml_dsa_key_compress_high_bits(uint32_t r, uint32_t gamma2) in ossl_ml_dsa_key_compress_high_bits() argument
66 if (gamma2 == ML_DSA_GAMMA2_Q_MINUS1_DIV32) { in ossl_ml_dsa_key_compress_high_bits()
86 void ossl_ml_dsa_key_compress_decompose(uint32_t r, uint32_t gamma2, in ossl_ml_dsa_key_compress_decompose() argument
89 *r1 = ossl_ml_dsa_key_compress_high_bits(r, gamma2); in ossl_ml_dsa_key_compress_decompose()
91 *r0 = r - *r1 * 2 * (int32_t)gamma2; in ossl_ml_dsa_key_compress_decompose()
104 int32_t ossl_ml_dsa_key_compress_low_bits(uint32_t r, uint32_t gamma2) in ossl_ml_dsa_key_compress_low_bits() argument
109 ossl_ml_dsa_key_compress_decompose(r, gamma2, &r1, &r0); in ossl_ml_dsa_key_compress_low_bits()
134 uint32_t gamma2, uint32_t w) in ossl_ml_dsa_key_compress_make_hint() argument
139 return ossl_ml_dsa_key_compress_high_bits(r, gamma2) in ossl_ml_dsa_key_compress_make_hint()
140 != ossl_ml_dsa_key_compress_high_bits(r_plus_z, gamma2); in ossl_ml_dsa_key_compress_make_hint()
[all …]
|
| H A D | ml_dsa_poly.h | 121 poly_high_bits(const POLY *in, uint32_t gamma2, POLY *out) in poly_high_bits() argument
126 out->coeff[i] = ossl_ml_dsa_key_compress_high_bits(in->coeff[i], gamma2); in poly_high_bits()
130 poly_low_bits(const POLY *in, uint32_t gamma2, POLY *out) in poly_low_bits() argument
135 out->coeff[i] = ossl_ml_dsa_key_compress_low_bits(in->coeff[i], gamma2); in poly_low_bits()
139 poly_make_hint(const POLY *ct0, const POLY *cs2, const POLY *w, uint32_t gamma2, in poly_make_hint() argument
147 gamma2, w->coeff[i]); in poly_make_hint()
151 poly_use_hint(const POLY *h, const POLY *r, uint32_t gamma2, POLY *out) in poly_use_hint() argument
157 r->coeff[i], gamma2); in poly_use_hint()
|
| H A D | ml_dsa_local.h | 81 uint32_t ossl_ml_dsa_key_compress_high_bits(uint32_t r, uint32_t gamma2);
82 void ossl_ml_dsa_key_compress_decompose(uint32_t r, uint32_t gamma2,
84 void ossl_ml_dsa_key_compress_decompose(uint32_t r, uint32_t gamma2,
86 int32_t ossl_ml_dsa_key_compress_low_bits(uint32_t r, uint32_t gamma2);
88 uint32_t gamma2, uint32_t w);
90 uint32_t gamma2);
99 int ossl_ml_dsa_w1_encode(const VECTOR *w1, uint32_t gamma2,
|
| H A D | ml_dsa_sign.c | 59 uint32_t gamma1 = params->gamma1, gamma2 = params->gamma2; in ml_dsa_sign_internal() local
81 w1_encoded_len = k * (gamma2 == ML_DSA_GAMMA2_Q_MINUS1_DIV88 ? 192 : 128); in ml_dsa_sign_internal()
151 vector_high_bits(&w, gamma2, &w1); in ml_dsa_sign_internal()
152 ossl_ml_dsa_w1_encode(&w1, gamma2, w1_encoded, w1_encoded_len); in ml_dsa_sign_internal()
171 vector_low_bits(r0, gamma2, r0); in ml_dsa_sign_internal()
180 | constant_time_ge(r0_max, gamma2 - params->beta))) in ml_dsa_sign_internal()
185 vector_make_hint(ct0, &cs2, &w, gamma2, &sig.hint); in ml_dsa_sign_internal()
190 if (value_barrier_32(constant_time_ge(ct0_max, gamma2) in ml_dsa_sign_internal()
219 uint32_t gamma2 = params->gamma2; in ml_dsa_verify_internal() local
234 w1_encoded_len = k * (gamma2 == ML_DSA_GAMMA2_Q_MINUS1_DIV88 ? 192 : 128); in ml_dsa_verify_internal()
[all …]
|
| H A D | ml_dsa_vector.h | 184 vector_high_bits(const VECTOR *in, uint32_t gamma2, VECTOR *out) in vector_high_bits() argument
189 poly_high_bits(in->poly + i, gamma2, out->poly + i); in vector_high_bits()
193 vector_low_bits(const VECTOR *in, uint32_t gamma2, VECTOR *out) in vector_low_bits() argument
198 poly_low_bits(in->poly + i, gamma2, out->poly + i); in vector_low_bits()
237 uint32_t gamma2, VECTOR *out) in vector_make_hint() argument
242 poly_make_hint(ct0->poly + i, cs2->poly + i, w->poly + i, gamma2, in vector_make_hint()
247 vector_use_hint(const VECTOR *h, const VECTOR *r, uint32_t gamma2, VECTOR *out) in vector_use_hint() argument
252 poly_use_hint(h->poly + i, r->poly + i, gamma2, out->poly + i); in vector_use_hint()
|
| H A D | ml_dsa_encoders.c | 998 int ossl_ml_dsa_w1_encode(const VECTOR *w1, uint32_t gamma2, in ossl_ml_dsa_w1_encode() argument
1008 if (gamma2 == ML_DSA_GAMMA2_Q_MINUS1_DIV32) in ossl_ml_dsa_w1_encode()
|
| /freebsd/crypto/openssl/include/crypto/ |
| H A D | ml_dsa.h | 61 int gamma2; /* low-order rounding range */ member
|