|
|
@@ -3,7 +3,7 @@ |
|
|
|
#include <stdint.h> |
|
|
|
|
|
|
|
/************************************************* |
|
|
|
* Name: PQCLEAN_KYBER768_CLEAN_montgomery_reduce |
|
|
|
* Name: kyber_montgomery_reduce |
|
|
|
* |
|
|
|
* Description: Montgomery reduction; given a 32-bit integer a, computes |
|
|
|
* 16-bit integer congruent to a * R^-1 mod q, where R=2^16 |
|
|
@@ -13,7 +13,7 @@ |
|
|
|
* |
|
|
|
* Returns: integer in {-q+1,...,q-1} congruent to a * R^-1 modulo q. |
|
|
|
**************************************************/ |
|
|
|
int16_t PQCLEAN_KYBER768_CLEAN_montgomery_reduce(int32_t a) { |
|
|
|
int16_t kyber_montgomery_reduce(int32_t a) { |
|
|
|
int32_t t; |
|
|
|
int16_t u; |
|
|
|
|
|
|
@@ -25,20 +25,19 @@ int16_t PQCLEAN_KYBER768_CLEAN_montgomery_reduce(int32_t a) { |
|
|
|
} |
|
|
|
|
|
|
|
/************************************************* |
|
|
|
* Name: PQCLEAN_KYBER768_CLEAN_barrett_reduce |
|
|
|
* Name: kyber_barrett_reduce |
|
|
|
* |
|
|
|
* Description: Barrett reduction; given a 16-bit integer a, computes |
|
|
|
* centered representative congruent to a mod q in {-(q-1)/2,...,(q-1)/2} |
|
|
|
* centered representative congruent to a mod q in {0,q} |
|
|
|
* |
|
|
|
* Arguments: - int16_t a: input integer to be reduced |
|
|
|
* |
|
|
|
* Returns: integer in {-(q-1)/2,...,(q-1)/2} congruent to a modulo q. |
|
|
|
* Returns: integer in {0,q} congruent to a modulo q. |
|
|
|
**************************************************/ |
|
|
|
int16_t PQCLEAN_KYBER768_CLEAN_barrett_reduce(int16_t a) { |
|
|
|
int16_t t; |
|
|
|
const int16_t v = ((1U << 26) + KYBER_Q / 2) / KYBER_Q; |
|
|
|
|
|
|
|
t = ((int32_t)v * a + (1 << 25)) >> 26; |
|
|
|
t *= KYBER_Q; |
|
|
|
return a - t; |
|
|
|
int16_t kyber_barrett_reduce(int16_t a) { |
|
|
|
static const int32_t v = 20159; |
|
|
|
int32_t t; |
|
|
|
t = v*a; |
|
|
|
t >>= 26; |
|
|
|
return a - ((int16_t)t)*KYBER_Q; |
|
|
|
} |