cx_mldsa_polyvec.h

Go to the documentation of this file.

/*****************************************************************************
 *   (c) 2026 Ledger SAS.
 *
 *  Licensed under the Apache License, Version 2.0 (the "License");
 *  you may not use this file except in compliance with the License.
 *  You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 *  Unless required by applicable law or agreed to in writing, software
 *  distributed under the License is distributed on an "AS IS" BASIS,
 *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 *  See the License for the specific language governing permissions and
 *  limitations under the License.
 *****************************************************************************/
#ifndef CX_MLDSA_POLYVEC_H
#define CX_MLDSA_POLYVEC_H
 
#include "cx_mldsa_poly.h"
#include "lcx_mldsa.h"
 
typedef struct {
    mldsa_poly vec[MLDSA_MAX_L];
} mldsa_polyvecl;
 
typedef struct {
    mldsa_poly vec[MLDSA_MAX_K];
} mldsa_polyveck;
 
void MLDSA_POLYVEC_ntt_l(mldsa_polyvecl *v, uint8_t l);
 
void MLDSA_POLYVEC_ntt_k(mldsa_polyveck *v, uint8_t k);
 
void MLDSA_POLYVEC_invntt_tomont_k(mldsa_polyveck *v, uint8_t k);
 
void MLDSA_POLYVEC_pointwise_acc_montgomery(mldsa_poly           *w,
                                            const mldsa_polyvecl *u,
                                            const mldsa_polyvecl *v,
                                            uint8_t               l);
 
void MLDSA_POLYVEC_add_k(mldsa_polyveck *a, const mldsa_polyveck *b, uint8_t k);
 
void MLDSA_POLYVEC_sub_k(mldsa_polyveck *a, const mldsa_polyveck *b, uint8_t k);
 
void MLDSA_POLYVEC_reduce_k(mldsa_polyveck *v, uint8_t k);
 
void MLDSA_POLYVEC_caddq_k(mldsa_polyveck *v, uint8_t k);
 
int MLDSA_POLYVEC_chknorm_l(const mldsa_polyvecl *v, int32_t B, uint8_t l);
 
int MLDSA_POLYVEC_chknorm_k(const mldsa_polyveck *v, int32_t B, uint8_t k);
 
void MLDSA_POLYVEC_shiftl_k(mldsa_polyveck *v, uint8_t k);
 
void MLDSA_POLYVEC_power2round_k(mldsa_polyveck       *v1,
                                 mldsa_polyveck       *v0,
                                 const mldsa_polyveck *v,
                                 uint8_t               k);
 
void MLDSA_POLYVEC_decompose_k(mldsa_polyveck       *v1,
                               mldsa_polyveck       *v0,
                               const mldsa_polyveck *v,
                               int32_t               gamma2,
                               uint8_t               k);
 
uint32_t MLDSA_POLYVEC_make_hint_k(mldsa_polyveck       *h,
                                   const mldsa_polyveck *v0,
                                   const mldsa_polyveck *v1,
                                   int32_t               gamma2,
                                   uint8_t               k);
 
void MLDSA_POLYVEC_use_hint_k(mldsa_polyveck       *w,
                              const mldsa_polyveck *u,
                              const mldsa_polyveck *h,
                              int32_t               gamma2,
                              uint8_t               k);
 
void MLDSA_POLYVEC_pack_w1(uint8_t *r, const mldsa_polyveck *w1, int32_t gamma2, uint8_t k);
 
#endif /* CX_MLDSA_POLYVEC_H */