|
|
@@ -24,33 +24,6 @@ static uint64_t load_littleendian(const unsigned char *x, int bytes) { |
|
|
|
void PQCLEAN_SABER_CLEAN_cbd(uint16_t *r, const unsigned char *buf) { |
|
|
|
uint16_t Qmod_minus1 = SABER_Q - 1; |
|
|
|
|
|
|
|
#if Saber_type == 3 |
|
|
|
uint32_t t, d, a[4], b[4]; |
|
|
|
int i, j; |
|
|
|
|
|
|
|
for (i = 0; i < SABER_N / 4; i++) { |
|
|
|
t = load_littleendian(buf + 3 * i, 3); |
|
|
|
d = 0; |
|
|
|
for (j = 0; j < 3; j++) { |
|
|
|
d += (t >> j) & 0x249249; |
|
|
|
} |
|
|
|
|
|
|
|
a[0] = d & 0x7; |
|
|
|
b[0] = (d >> 3) & 0x7; |
|
|
|
a[1] = (d >> 6) & 0x7; |
|
|
|
b[1] = (d >> 9) & 0x7; |
|
|
|
a[2] = (d >> 12) & 0x7; |
|
|
|
b[2] = (d >> 15) & 0x7; |
|
|
|
a[3] = (d >> 18) & 0x7; |
|
|
|
b[3] = (d >> 21); |
|
|
|
|
|
|
|
r[4 * i + 0] = (uint16_t)(a[0] - b[0]) & Qmod_minus1; |
|
|
|
r[4 * i + 1] = (uint16_t)(a[1] - b[1]) & Qmod_minus1; |
|
|
|
r[4 * i + 2] = (uint16_t)(a[2] - b[2]) & Qmod_minus1; |
|
|
|
r[4 * i + 3] = (uint16_t)(a[3] - b[3]) & Qmod_minus1; |
|
|
|
|
|
|
|
} |
|
|
|
#elif Saber_type == 2 |
|
|
|
uint32_t t, d, a[4], b[4]; |
|
|
|
int i, j; |
|
|
|
|
|
|
@@ -75,32 +48,4 @@ void PQCLEAN_SABER_CLEAN_cbd(uint16_t *r, const unsigned char *buf) { |
|
|
|
r[4 * i + 2] = (uint16_t)(a[2] - b[2]) & Qmod_minus1; |
|
|
|
r[4 * i + 3] = (uint16_t)(a[3] - b[3]) & Qmod_minus1; |
|
|
|
} |
|
|
|
#elif Saber_type == 1 |
|
|
|
uint64_t t, d, a[4], b[4]; |
|
|
|
int i, j; |
|
|
|
|
|
|
|
for (i = 0; i < SABER_N / 4; i++) { |
|
|
|
t = load_littleendian(buf + 5 * i, 5); |
|
|
|
d = 0; |
|
|
|
for (j = 0; j < 5; j++) { |
|
|
|
d += (t >> j) & 0x0842108421UL; |
|
|
|
} |
|
|
|
|
|
|
|
a[0] = d & 0x1f; |
|
|
|
b[0] = (d >> 5) & 0x1f; |
|
|
|
a[1] = (d >> 10) & 0x1f; |
|
|
|
b[1] = (d >> 15) & 0x1f; |
|
|
|
a[2] = (d >> 20) & 0x1f; |
|
|
|
b[2] = (d >> 25) & 0x1f; |
|
|
|
a[3] = (d >> 30) & 0x1f; |
|
|
|
b[3] = (d >> 35); |
|
|
|
|
|
|
|
r[4 * i + 0] = (uint16_t)(a[0] - b[0]) & Qmod_minus1; |
|
|
|
r[4 * i + 1] = (uint16_t)(a[1] - b[1]) & Qmod_minus1; |
|
|
|
r[4 * i + 2] = (uint16_t)(a[2] - b[2]) & Qmod_minus1; |
|
|
|
r[4 * i + 3] = (uint16_t)(a[3] - b[3]) & Qmod_minus1; |
|
|
|
} |
|
|
|
#else |
|
|
|
#error "Unsupported SABER parameter." |
|
|
|
#endif |
|
|
|
} |