#include "lcx_mlkem.h"

Include dependency graph for cx_mlkem_poly.h:

This graph shows which files directly or indirectly include this file:

Classes
struct	poly
	Polynomial with MLKEM_N coefficients. More...

Functions
int16_t	MLKEM_POLY_montgomery_reduce (int32_t a)
	Montgomery reduction of a 32-bit integer.

int16_t	MLKEM_POLY_fqmul (int16_t a, int16_t b)
	Multiplication in the NTT domain followed by Montgomery reduction.

int16_t	MLKEM_POLY_barrett_reduce (int16_t a)
	Barrett reduction of a coefficient modulo q.

int16_t	MLKEM_POLY_signed_to_unsigned_q (int16_t c)
	Maps a signed representative to an unsigned one in [0, q-1].

void	MLKEM_POLY_reduce (poly *r)
	Applies Barrett reduction to all coefficients and map to [0, q-1].

void	MLKEM_POLY_tomont (poly *r)
	Converts a polynomial to Montgomery domain.

void	MLKEM_POLY_add (poly r, const poly b)
	Adds polynomial b to polynomial r in place.

void	MLKEM_POLY_sub (poly r, const poly b)
	Subtracts polynomial b from polynomial r in place.

void	MLKEM_POLY_ntt (poly *p)
	Computes the NTT of a polynomial in place.

void	MLKEM_POLY_invntt_tomont (poly *p)
	Computes the inverse NTT and multiply by Montgomery factor.

void	MLKEM_POLY_basemul_acc_montgomery (poly r, const poly a, const poly *b, int32_t first)
	Pointwise multiplication of two polynomials in NTT domain with accumulation.

void	MLKEM_POLY_tobytes (uint8_t r, const poly a)
	Serializes a polynomial to bytes (12 bits per coefficient).

void	MLKEM_POLY_frombytes (poly r, const uint8_t a)
	Deserializes a polynomial from bytes (12 bits per coefficient).

uint8_t	MLKEM_POLY_scalar_compress_d1 (int16_t u)
	Scalar compression with d=1.

uint8_t	MLKEM_POLY_scalar_compress_d4 (int16_t u)
	Scalar compression with d=4.

int16_t	MLKEM_POLY_scalar_decompress_d4 (uint8_t u)
	Scalar decompression with d=4.

uint8_t	MLKEM_POLY_scalar_compress_d5 (int16_t u)
	Scalar compression with d=5.

int16_t	MLKEM_POLY_scalar_decompress_d5 (uint8_t u)
	Scalar decompression with d=5.

uint16_t	MLKEM_POLY_scalar_compress_d10 (int16_t u)
	Scalar compression with d=10.

int16_t	MLKEM_POLY_scalar_decompress_d10 (uint16_t u)
	Scalar decompression with d=10.

uint16_t	MLKEM_POLY_scalar_compress_d11 (int16_t u)
	Scalar compression with d=11.

int16_t	MLKEM_POLY_scalar_decompress_d11 (uint16_t u)
	Scalar decompression with d=11.

void	MLKEM_POLY_compress_d4 (uint8_t r, const poly a)
	Compresses a polynomial with dv=4 and serialize to bytes.

void	MLKEM_POLY_decompress_d4 (poly r, const uint8_t a)
	Decompresses a polynomial from bytes with dv=4.

void	MLKEM_POLY_compress_d5 (uint8_t r, const poly a)
	Compresses a polynomial with dv=5 and serialize to bytes.

void	MLKEM_POLY_decompress_d5 (poly r, const uint8_t a)
	Decompresses a polynomial from bytes with dv=5.

void	MLKEM_POLY_compress_d10 (uint8_t r, const poly a)
	Compresses a polynomial with du=10 and serialize to bytes.

void	MLKEM_POLY_decompress_d10 (poly r, const uint8_t a)
	Decompresses a polynomial from bytes with du=10.

void	MLKEM_POLY_compress_d11 (uint8_t r, const poly a)
	Compresses a polynomial with du=11 and serialize to bytes.

void	MLKEM_POLY_decompress_d11 (poly r, const uint8_t a)
	Decompresses a polynomial from bytes with du=11.

void	MLKEM_POLY_frommsg (poly r, const uint8_t msg)
	Decodes a 32-byte message into a polynomial.

void	MLKEM_POLY_tomsg (uint8_t msg, const poly a)
	Encodes a polynomial into a 32-byte message.

Function Documentation

◆ MLKEM_POLY_add()

void MLKEM_POLY_add	(	poly *	r,
		const poly *	b
	)

Adds polynomial b to polynomial r in place.

Parameters

[in,out]	r	Accumulator polynomial.
[in]	b	Polynomial to add.

Definition at line 107 of file cx_mlkem_poly.c.

◆ MLKEM_POLY_barrett_reduce()

int16_t MLKEM_POLY_barrett_reduce ( int16_t a )

Barrett reduction of a coefficient modulo q.

Parameters

[in] a Input coefficient.

Returns: Reduced coefficient.

Definition at line 80 of file cx_mlkem_poly.c.

◆ MLKEM_POLY_basemul_acc_montgomery()

void MLKEM_POLY_basemul_acc_montgomery	(	poly *	r,
		const poly *	a,
		const poly *	b,
		int32_t	first
	)

Pointwise multiplication of two polynomials in NTT domain with accumulation.

Parameters

[in,out]	r	Accumulator polynomial (set or accumulated depending on `first`).
[in]	a	First input polynomial.
[in]	b	Second input polynomial.
[in]	first	If non-zero, overwrite r; otherwise accumulate into r.

Definition at line 159 of file cx_mlkem_poly.c.

◆ MLKEM_POLY_compress_d10()

void MLKEM_POLY_compress_d10	(	uint8_t *	r,
		const poly *	a
	)

Compresses a polynomial with du=10 and serialize to bytes.

Parameters

[out]	r	Output byte array.
[in]	a	Polynomial to compress.

Definition at line 342 of file cx_mlkem_poly.c.

◆ MLKEM_POLY_compress_d11()

void MLKEM_POLY_compress_d11	(	uint8_t *	r,
		const poly *	a
	)

Compresses a polynomial with du=11 and serialize to bytes.

Parameters

[out]	r	Output byte array.
[in]	a	Polynomial to compress.

Definition at line 373 of file cx_mlkem_poly.c.

◆ MLKEM_POLY_compress_d4()

void MLKEM_POLY_compress_d4	(	uint8_t *	r,
		const poly *	a
	)

Compresses a polynomial with dv=4 and serialize to bytes.

Parameters

[out]	r	Output byte array.
[in]	a	Polynomial to compress.

Definition at line 285 of file cx_mlkem_poly.c.

◆ MLKEM_POLY_compress_d5()

void MLKEM_POLY_compress_d5	(	uint8_t *	r,
		const poly *	a
	)

Compresses a polynomial with dv=5 and serialize to bytes.

Parameters

[out]	r	Output byte array.
[in]	a	Polynomial to compress.

Definition at line 308 of file cx_mlkem_poly.c.

◆ MLKEM_POLY_decompress_d10()

void MLKEM_POLY_decompress_d10	(	poly *	r,
		const uint8_t *	a
	)

Decompresses a polynomial from bytes with du=10.

Parameters

[out]	r	Output polynomial.
[in]	a	Input compressed byte array.

Definition at line 357 of file cx_mlkem_poly.c.

◆ MLKEM_POLY_decompress_d11()

void MLKEM_POLY_decompress_d11	(	poly *	r,
		const uint8_t *	a
	)

Decompresses a polynomial from bytes with du=11.

Parameters

[out]	r	Output polynomial.
[in]	a	Input compressed byte array.

Definition at line 394 of file cx_mlkem_poly.c.

◆ MLKEM_POLY_decompress_d4()

void MLKEM_POLY_decompress_d4	(	poly *	r,
		const uint8_t *	a
	)

Decompresses a polynomial from bytes with dv=4.

Parameters

[out]	r	Output polynomial.
[in]	a	Input compressed byte array.

Definition at line 299 of file cx_mlkem_poly.c.

◆ MLKEM_POLY_decompress_d5()

void MLKEM_POLY_decompress_d5	(	poly *	r,
		const uint8_t *	a
	)

Decompresses a polynomial from bytes with dv=5.

Parameters

[out]	r	Output polynomial.
[in]	a	Input compressed byte array.

Definition at line 323 of file cx_mlkem_poly.c.

◆ MLKEM_POLY_fqmul()

int16_t MLKEM_POLY_fqmul	(	int16_t	a,
		int16_t	b
	)

Multiplication in the NTT domain followed by Montgomery reduction.

Parameters

[in]	a	First operand.
[in]	b	Second operand.

Returns: Product reduced modulo q.

Definition at line 75 of file cx_mlkem_poly.c.

◆ MLKEM_POLY_frombytes()

void MLKEM_POLY_frombytes	(	poly *	r,
		const uint8_t *	a
	)

Deserializes a polynomial from bytes (12 bits per coefficient).

Parameters

[out]	r	Output polynomial.
[in]	a	Input byte array of MLKEM_POLYBYTES bytes.

Definition at line 217 of file cx_mlkem_poly.c.

◆ MLKEM_POLY_frommsg()

void MLKEM_POLY_frommsg	(	poly *	r,
		const uint8_t *	msg
	)

Decodes a 32-byte message into a polynomial.

Parameters

[out]	r	Output polynomial.
[in]	msg	Input message of MLKEM_SYMBYTES bytes.

Definition at line 414 of file cx_mlkem_poly.c.

◆ MLKEM_POLY_invntt_tomont()

void MLKEM_POLY_invntt_tomont ( poly * p )

Computes the inverse NTT and multiply by Montgomery factor.

Parameters

[in,out] p Polynomial to transform in place.

Definition at line 138 of file cx_mlkem_poly.c.

◆ MLKEM_POLY_montgomery_reduce()

int16_t MLKEM_POLY_montgomery_reduce ( int32_t a )

Montgomery reduction of a 32-bit integer.

Parameters

[in] a Input value.

Returns: Reduced value in [-q/2, q/2].

Definition at line 67 of file cx_mlkem_poly.c.

◆ MLKEM_POLY_ntt()

void MLKEM_POLY_ntt ( poly * p )

Computes the NTT of a polynomial in place.

Parameters

[in,out] p Polynomial to transform.

Definition at line 121 of file cx_mlkem_poly.c.

◆ MLKEM_POLY_reduce()

void MLKEM_POLY_reduce ( poly * r )

Applies Barrett reduction to all coefficients and map to [0, q-1].

Parameters

[in,out] r Polynomial to reduce in place.

Definition at line 93 of file cx_mlkem_poly.c.

◆ MLKEM_POLY_scalar_compress_d1()

uint8_t MLKEM_POLY_scalar_compress_d1 ( int16_t u )

Scalar compression with d=1.

Parameters

[in] u Coefficient to compress.

Returns: Compressed value (1 bit).

Definition at line 232 of file cx_mlkem_poly.c.

◆ MLKEM_POLY_scalar_compress_d10()

uint16_t MLKEM_POLY_scalar_compress_d10 ( int16_t u )

Scalar compression with d=10.

Parameters

[in] u Coefficient to compress.

Returns: Compressed value (10 bits).

Definition at line 260 of file cx_mlkem_poly.c.

◆ MLKEM_POLY_scalar_compress_d11()

uint16_t MLKEM_POLY_scalar_compress_d11 ( int16_t u )

Scalar compression with d=11.

Parameters

[in] u Coefficient to compress.

Returns: Compressed value (11 bits).

Definition at line 272 of file cx_mlkem_poly.c.

◆ MLKEM_POLY_scalar_compress_d4()

uint8_t MLKEM_POLY_scalar_compress_d4 ( int16_t u )

Scalar compression with d=4.

Parameters

[in] u Coefficient to compress.

Returns: Compressed value (4 bits).

Definition at line 238 of file cx_mlkem_poly.c.

◆ MLKEM_POLY_scalar_compress_d5()

uint8_t MLKEM_POLY_scalar_compress_d5 ( int16_t u )

Scalar compression with d=5.

Parameters

[in] u Coefficient to compress.

Returns: Compressed value (5 bits).

Definition at line 249 of file cx_mlkem_poly.c.

◆ MLKEM_POLY_scalar_decompress_d10()

int16_t MLKEM_POLY_scalar_decompress_d10 ( uint16_t u )

Scalar decompression with d=10.

Parameters

[in] u Compressed value (10 bits).

Returns: Decompressed coefficient.

Definition at line 267 of file cx_mlkem_poly.c.

◆ MLKEM_POLY_scalar_decompress_d11()

int16_t MLKEM_POLY_scalar_decompress_d11 ( uint16_t u )

Scalar decompression with d=11.

Parameters

[in] u Compressed value (11 bits).

Returns: Decompressed coefficient.

Definition at line 279 of file cx_mlkem_poly.c.

◆ MLKEM_POLY_scalar_decompress_d4()

int16_t MLKEM_POLY_scalar_decompress_d4 ( uint8_t u )

Scalar decompression with d=4.

Parameters

[in] u Compressed value (4 bits).

Returns: Decompressed coefficient.

Definition at line 244 of file cx_mlkem_poly.c.

◆ MLKEM_POLY_scalar_decompress_d5()

int16_t MLKEM_POLY_scalar_decompress_d5 ( uint8_t u )

Scalar decompression with d=5.

Parameters

[in] u Compressed value (5 bits).

Returns: Decompressed coefficient.

Definition at line 255 of file cx_mlkem_poly.c.

◆ MLKEM_POLY_signed_to_unsigned_q()

int16_t MLKEM_POLY_signed_to_unsigned_q ( int16_t c )

Maps a signed representative to an unsigned one in [0, q-1].

Parameters

[in] c Signed coefficient.

Returns: Unsigned representative modulo q.

Definition at line 87 of file cx_mlkem_poly.c.

◆ MLKEM_POLY_sub()

void MLKEM_POLY_sub	(	poly *	r,
		const poly *	b
	)

Subtracts polynomial b from polynomial r in place.

Parameters

[in,out]	r	Accumulator polynomial.
[in]	b	Polynomial to subtract.

Definition at line 114 of file cx_mlkem_poly.c.

◆ MLKEM_POLY_tobytes()

void MLKEM_POLY_tobytes	(	uint8_t *	r,
		const poly *	a
	)

Serializes a polynomial to bytes (12 bits per coefficient).

Parameters

[out]	r	Output byte array of MLKEM_POLYBYTES bytes.
[in]	a	Polynomial to serialize.

Definition at line 206 of file cx_mlkem_poly.c.

◆ MLKEM_POLY_tomont()

void MLKEM_POLY_tomont ( poly * r )

Converts a polynomial to Montgomery domain.

Parameters

[in,out] r Polynomial to convert in place.

Definition at line 100 of file cx_mlkem_poly.c.

◆ MLKEM_POLY_tomsg()

void MLKEM_POLY_tomsg	(	uint8_t *	msg,
		const poly *	a
	)

Encodes a polynomial into a 32-byte message.

Parameters

[out]	msg	Output message of MLKEM_SYMBYTES bytes.
[in]	a	Polynomial to encode.

Definition at line 424 of file cx_mlkem_poly.c.

Classes

Functions

Function Documentation

◆ MLKEM_POLY_add()

◆ MLKEM_POLY_barrett_reduce()

◆ MLKEM_POLY_basemul_acc_montgomery()

◆ MLKEM_POLY_compress_d10()

◆ MLKEM_POLY_compress_d11()

◆ MLKEM_POLY_compress_d4()

◆ MLKEM_POLY_compress_d5()

◆ MLKEM_POLY_decompress_d10()

◆ MLKEM_POLY_decompress_d11()

◆ MLKEM_POLY_decompress_d4()

◆ MLKEM_POLY_decompress_d5()

◆ MLKEM_POLY_fqmul()

◆ MLKEM_POLY_frombytes()

◆ MLKEM_POLY_frommsg()

◆ MLKEM_POLY_invntt_tomont()

◆ MLKEM_POLY_montgomery_reduce()

◆ MLKEM_POLY_ntt()

◆ MLKEM_POLY_reduce()

◆ MLKEM_POLY_scalar_compress_d1()

◆ MLKEM_POLY_scalar_compress_d10()

◆ MLKEM_POLY_scalar_compress_d11()

◆ MLKEM_POLY_scalar_compress_d4()

◆ MLKEM_POLY_scalar_compress_d5()

◆ MLKEM_POLY_scalar_decompress_d10()

◆ MLKEM_POLY_scalar_decompress_d11()

◆ MLKEM_POLY_scalar_decompress_d4()

◆ MLKEM_POLY_scalar_decompress_d5()

◆ MLKEM_POLY_signed_to_unsigned_q()

◆ MLKEM_POLY_sub()

◆ MLKEM_POLY_tobytes()

◆ MLKEM_POLY_tomont()

◆ MLKEM_POLY_tomsg()