cx_mldsa_lowram.h

Go to the documentation of this file.

/*****************************************************************************
 *   (c) 2026 Ledger SAS.
 *
 *  Licensed under the Apache License, Version 2.0 (the "License");
 *  you may not use this file except in compliance with the License.
 *  You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 *  Unless required by applicable law or agreed to in writing, software
 *  distributed under the License is distributed on an "AS IS" BASIS,
 *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 *  See the License for the specific language governing permissions and
 *  limitations under the License.
 *****************************************************************************/
#ifndef CX_MLDSA_LOWRAM_H
#define CX_MLDSA_LOWRAM_H
 
#ifdef HAVE_MLDSA_OPTIMIZATION
 
#include <stdint.h>
#include "lcx_mldsa.h"
#include "cx_mldsa_poly.h"
 
#define MLDSA_WCOMP_BYTES 768U
 
#define MLDSA_CCOMP_BYTES 68U
 
#define MLDSA_MAX_OMEGA 80U
 
void MLDSA_LOWRAM_polyw_pack(uint8_t buf[MLDSA_WCOMP_BYTES], const mldsa_poly *w);
 
void MLDSA_LOWRAM_polyw_unpack(mldsa_poly *w, const uint8_t buf[MLDSA_WCOMP_BYTES]);
 
void MLDSA_LOWRAM_polyw_add_idx(uint8_t buf[MLDSA_WCOMP_BYTES], int32_t a, uint32_t idx);
 
void MLDSA_LOWRAM_polyw_sub(mldsa_poly       *c,
                            const uint8_t     buf[MLDSA_WCOMP_BYTES],
                            const mldsa_poly *a);
 
void MLDSA_LOWRAM_challenge_compress(uint8_t           ccomp[MLDSA_CCOMP_BYTES],
                                     const mldsa_poly *cp,
                                     uint8_t           tau);
 
void MLDSA_LOWRAM_challenge_decompress(mldsa_poly   *cp,
                                       const uint8_t ccomp[MLDSA_CCOMP_BYTES],
                                       uint8_t       tau);
 
void MLDSA_LOWRAM_schoolbook_t0(mldsa_poly    *c,
                                const uint8_t  ccomp[MLDSA_CCOMP_BYTES],
                                const uint8_t *t0,
                                uint8_t        tau);
 
void MLDSA_LOWRAM_schoolbook_t1(mldsa_poly    *c,
                                const uint8_t  ccomp[MLDSA_CCOMP_BYTES],
                                const uint8_t *t1,
                                uint8_t        tau);
 
void MLDSA_LOWRAM_expand_aij_accum(uint8_t           wcomp[MLDSA_WCOMP_BYTES],
                                   const mldsa_poly *b,
                                   const uint8_t     rho[MLDSA_SEEDBYTES],
                                   uint16_t          nonce);
 
void MLDSA_LOWRAM_poly_highbits(mldsa_poly *a1, const mldsa_poly *a, int32_t gamma2);
 
void MLDSA_LOWRAM_poly_lowbits(mldsa_poly *a0, const mldsa_poly *a, int32_t gamma2);
 
void MLDSA_LOWRAM_poly_r0(mldsa_poly    *r0,
                          const uint8_t  wcomp[MLDSA_WCOMP_BYTES],
                          const uint8_t *w1_packed,
                          int32_t        gamma2);
 
uint32_t MLDSA_LOWRAM_make_hint(mldsa_poly       *h,
                                const mldsa_poly *ct0,
                                const uint8_t     wcomp[MLDSA_WCOMP_BYTES],
                                const uint8_t    *w1_packed,
                                int32_t           gamma2);
 
void MLDSA_LOWRAM_use_hint_indices(mldsa_poly       *b,
                                   const mldsa_poly *a,
                                   const uint8_t    *h_indices,
                                   uint32_t          num_hints,
                                   int32_t           gamma2);
 
void MLDSA_LOWRAM_sample_gamma1(mldsa_poly   *a,
                                const uint8_t seed[MLDSA_CRHBYTES],
                                uint16_t      nonce,
                                int32_t       gamma1);
 
void MLDSA_LOWRAM_sample_gamma1_add(mldsa_poly       *a,
                                    const mldsa_poly *b,
                                    const uint8_t     seed[MLDSA_CRHBYTES],
                                    uint16_t          nonce,
                                    int32_t           gamma1);
 
#endif /* HAVE_MLDSA_OPTIMIZATION */
#endif /* CX_MLDSA_LOWRAM_H */