kaidokert / krabipqc-rs / 27860012671

94%

push

github

Consolidate API: default to constant-time, drop _ct siblings (#13)

* ML-DSA: drop redundant *_ct entry points, default to secure path

Sign/keygen need constant-time Mont REDC because secret material flows
through field ops; verify operates on public inputs (pk, sig, m) and
the variable-time finalize has nothing to leak. Shipping the Nct
variant as the default `sign` and the Ct one as a `_ct` opt-in was a
footgun.

32 of 33 new or added lines in 4 files covered. (96.97%)

2940 of 3176 relevant lines covered (92.57%)

52877.74 hits per line