ocrypto_ml_kem768.h

Go to the documentation of this file.

/*
 * Copyright (c) 2016 - 2025 Nordic Semiconductor ASA
 * Copyright (c) since 2013 Oberon microsystems AG
 *
 * SPDX-License-Identifier: LicenseRef-Nordic-5-Clause
 */
 
 
#ifndef OCRYPTO_ML_KEM768_H
#define OCRYPTO_ML_KEM768_H
 
#include <stddef.h>
#include <stdint.h>
 
#include "ocrypto_sha3.h"
 
 
#ifdef __cplusplus
extern "C" {
#endif
 
#define ocrypto_ml_kem768_SK_SIZE ((3 * 384) + (3 * 384 + 32) + 64)
 
#define ocrypto_ml_kem768_PK_SIZE (3 * 384 + 32)
 
#define ocrypto_ml_kem768_CT_SIZE ((3 * 10 + 4) * 32)
 
 
typedef struct {
    ocrypto_sha3_ctx sha3;
    int16_t u[3][256];
    int16_t t[256];
    uint8_t kr[64];
} ocrypto_ml_kem768_ctx;
void ocrypto_ml_kem768_key_pair(
    ocrypto_ml_kem768_ctx *ctx,
    uint8_t sk[ocrypto_ml_kem768_SK_SIZE],
    uint8_t pk[ocrypto_ml_kem768_PK_SIZE],
    const uint8_t d[32],
    const uint8_t z[32]);
 
int ocrypto_ml_kem768_check_key(
    const uint8_t pk[ocrypto_ml_kem768_PK_SIZE]);
 
void ocrypto_ml_kem768_encaps(
    ocrypto_ml_kem768_ctx *ctx,
    uint8_t key[32],
    uint8_t ct[ocrypto_ml_kem768_CT_SIZE],
    const uint8_t pk[ocrypto_ml_kem768_PK_SIZE],
    const uint8_t m[32]);
 
void ocrypto_ml_kem768_decaps(
    ocrypto_ml_kem768_ctx *ctx,
    uint8_t key[32],
    const uint8_t sk[ocrypto_ml_kem768_SK_SIZE],
    const uint8_t ct[ocrypto_ml_kem768_CT_SIZE]);
 
 
#ifdef __cplusplus
}
#endif
 
#endif