Stack-allocated workspace for MLDSA_internal_sign_core. More...
Public Attributes | |
| uint8_t | rho [MLDSA_SEEDBYTES] |
| uint8_t | K [MLDSA_SEEDBYTES] |
| uint8_t | tr [MLDSA_TRBYTES] |
| uint8_t | mu [MLDSA_CRHBYTES] |
| uint8_t | rhoprime [MLDSA_CRHBYTES] |
| uint8_t | ctilde [64U] |
| uint8_t | w1_packed [MLDSA_MAX_K *192U] |
| mldsa_polyveck | w |
| mldsa_poly | cp |
| mldsa_poly | t0 |
| mldsa_poly | t1 |
| mldsa_poly | t2 |
Detailed Description
Stack-allocated workspace for MLDSA_internal_sign_core.
The signer streams the secret key, the masking vector y and the matrix A one polynomial at a time, so the only full vector kept across a rejection-loop iteration is w.
Definition at line 91 of file cx_mldsa.c.
Member Data Documentation
◆ cp
| mldsa_poly MLDSA_sign_stack_workspace_s::cp |
Challenge polynomial c (NTT domain).
Definition at line 100 of file cx_mldsa.c.
◆ ctilde
| uint8_t MLDSA_sign_stack_workspace_s::ctilde[64U] |
Challenge hash c_tilde.
Definition at line 97 of file cx_mldsa.c.
◆ K
| uint8_t MLDSA_sign_stack_workspace_s::K[MLDSA_SEEDBYTES] |
Secret seed K from the secret key.
Definition at line 93 of file cx_mldsa.c.
◆ mu
| uint8_t MLDSA_sign_stack_workspace_s::mu[MLDSA_CRHBYTES] |
Message representative mu = H(tr || M').
Definition at line 95 of file cx_mldsa.c.
◆ rho
| uint8_t MLDSA_sign_stack_workspace_s::rho[MLDSA_SEEDBYTES] |
Public seed rho.
Definition at line 92 of file cx_mldsa.c.
◆ rhoprime
| uint8_t MLDSA_sign_stack_workspace_s::rhoprime[MLDSA_CRHBYTES] |
Derived nonce seed rhoprime.
Definition at line 96 of file cx_mldsa.c.
◆ t0
| mldsa_poly MLDSA_sign_stack_workspace_s::t0 |
General-purpose scratch polynomial.
Definition at line 101 of file cx_mldsa.c.
◆ t1
| mldsa_poly MLDSA_sign_stack_workspace_s::t1 |
General-purpose scratch polynomial.
Definition at line 102 of file cx_mldsa.c.
◆ t2
| mldsa_poly MLDSA_sign_stack_workspace_s::t2 |
General-purpose scratch polynomial.
Definition at line 103 of file cx_mldsa.c.
◆ tr
| uint8_t MLDSA_sign_stack_workspace_s::tr[MLDSA_TRBYTES] |
Hash of the public key (tr = H(pk)).
Definition at line 94 of file cx_mldsa.c.
◆ w
| mldsa_polyveck MLDSA_sign_stack_workspace_s::w |
Product A*NTT(y), kept across iteration.
Definition at line 99 of file cx_mldsa.c.
◆ w1_packed
| uint8_t MLDSA_sign_stack_workspace_s::w1_packed[MLDSA_MAX_K *192U] |
Byte-packed w1 vector for hashing.
Definition at line 98 of file cx_mldsa.c.
The documentation for this struct was generated from the following file:
- lib_cxng/src/cx_mldsa.c
