kaidokert / krabipqc-rs / 27879336288

94%

push

github

ML-KEM decaps: eliminate ct_prime buffer and stream t_hat/e1 (#16)

* ML-KEM decaps: eliminate ct_prime buffer via inline FO comparison

Instead of buffering the full re-encrypted ciphertext (768–2048 bytes
depending on K) and comparing after the fact, encrypt_compare_impl
encodes each u_row into a fixed 352-byte scratch buffer, XORs it
against the corresponding ct slice, and accumulates a single diff byte.
The v polynomial likewise uses a 160-byte scratch. The accumulated diff
converts to the same 0xFF/0x00 CT mask that decaps uses for implicit-reject.

Eliminates the ct_prime_buf stack allocation from decaps_internal_impl
entirely. ct_equal is also removed; its logic is now in pke.rs.

107 of 108 new or added lines in 3 files covered. (99.07%)

3067 of 3303 relevant lines covered (92.85%)

50960.86 hits per line