kris/pqcrypto
1
1
Fork 0
mirror of https://github.com/henrydcase/pqc.git synced 2024-11-22 15:39:07 +00:00
Code Issues 1 Releases Wiki Activity

Fix reduce.c's overflowing multiplication

Browse Source
This commit is contained in:
Thom Wiggers 2020-03-09 17:57:43 -04:00 committed by Kris Kwiatkowski
parent ea5ede6e80
commit 3ef983c459
6 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
crypto_kem/kyber1024-90s/clean/reduce.c
View File

@ -18,7 +18,7 @@ int16_t PQCLEAN_KYBER102490S_CLEAN_montgomery_reduce(int32_t a) {
int32_t t; int32_t t;
int16_t u; int16_t u;
u = (int16_t)(a * QINV); u = (int16_t)(a * (int64_t)QINV);
t = (int32_t)u * KYBER_Q; t = (int32_t)u * KYBER_Q;
t = a - t; t = a - t;
t >>= 16; t >>= 16;

2
crypto_kem/kyber1024/clean/reduce.c
View File

@ -18,7 +18,7 @@ int16_t PQCLEAN_KYBER1024_CLEAN_montgomery_reduce(int32_t a) {
int32_t t; int32_t t;
int16_t u; int16_t u;
u = (int16_t)(a * QINV); u = (int16_t)(a * (int64_t)QINV);
t = (int32_t)u * KYBER_Q; t = (int32_t)u * KYBER_Q;
t = a - t; t = a - t;
t >>= 16; t >>= 16;

2
crypto_kem/kyber512-90s/clean/reduce.c
View File

@ -18,7 +18,7 @@ int16_t PQCLEAN_KYBER51290S_CLEAN_montgomery_reduce(int32_t a) {
int32_t t; int32_t t;
int16_t u; int16_t u;
u = (int16_t)(a * QINV); u = (int16_t)(a * (int64_t)QINV);
t = (int32_t)u * KYBER_Q; t = (int32_t)u * KYBER_Q;
t = a - t; t = a - t;
t >>= 16; t >>= 16;

2
crypto_kem/kyber512/clean/reduce.c
View File

@ -18,7 +18,7 @@ int16_t PQCLEAN_KYBER512_CLEAN_montgomery_reduce(int32_t a) {
int32_t t; int32_t t;
int16_t u; int16_t u;
u = (int16_t)(a * QINV); u = (int16_t)(a * (int64_t)QINV);
t = (int32_t)u * KYBER_Q; t = (int32_t)u * KYBER_Q;
t = a - t; t = a - t;
t >>= 16; t >>= 16;

2
crypto_kem/kyber768-90s/clean/reduce.c
View File

@ -18,7 +18,7 @@ int16_t PQCLEAN_KYBER76890S_CLEAN_montgomery_reduce(int32_t a) {
int32_t t; int32_t t;
int16_t u; int16_t u;
u = (int16_t)(a * QINV); u = (int16_t)(a * (int64_t)QINV);
t = (int32_t)u * KYBER_Q; t = (int32_t)u * KYBER_Q;
t = a - t; t = a - t;
t >>= 16; t >>= 16;

2
crypto_kem/kyber768/clean/reduce.c
View File

@ -18,7 +18,7 @@ int16_t PQCLEAN_KYBER768_CLEAN_montgomery_reduce(int32_t a) {
int32_t t; int32_t t;
int16_t u; int16_t u;
u = (int16_t)(a * QINV); u = (int16_t)(a * (int64_t)QINV);
t = (int32_t)u * KYBER_Q; t = (int32_t)u * KYBER_Q;
t = a - t; t = a - t;
t >>= 16; t >>= 16;