pq_crypto 0.6.3 → 0.6.5

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/{poly_tomont_aarch64_asm.S → mlkem_poly_tomont_aarch64_asm.S}

@@ -8,6 +8,9 @@
   Description: Convert polynomial to Montgomery domain
   Signature: void mlk_poly_tomont_aarch64_asm(int16_t p[256])
   ABI:
+    Architecture: aarch64
+    CallingConvention: AAPCS64
+    Features: [NEON]
     x0:
       type: buffer
       size_bytes: 512
@@ -19,11 +22,13 @@
 */
 
 #include "../../../common.h"
-#if defined(MLK_ARITH_BACKEND_AARCH64) &&  !defined(MLK_CONFIG_MULTILEVEL_NO_SHARED)
+#if defined(MLK_ARITH_BACKEND_AARCH64) && \
+    !defined(MLK_CONFIG_MULTILEVEL_NO_SHARED) && \
+    !defined(MLK_CONFIG_NO_KEYPAIR_API)
 
 /*
  * WARNING: This file is auto-derived from the mlkem-native source file
- *   dev/aarch64_opt/src/poly_tomont_aarch64_asm.S using scripts/simpasm. Do not modify it directly.
+ *   dev/aarch64_opt/src/mlkem_poly_tomont_aarch64_asm.S using scripts/simpasm. Do not modify it directly.
  */
 
 .text
@@ -57,7 +62,7 @@ MLK_ASM_FN_SYMBOL(poly_tomont_aarch64_asm)
         mls v18.8h, v26.8h, v4.h[0]
         sub x1, x1, #0x1
 
-Lpoly_tomont_loop:
+Lmlk_poly_tomont_loop:
         ldr q19, [x0, #0x10]
         mul v26.8h, v16.8h, v2.8h
         ldr q23, [x0, #0x20]
@@ -79,7 +84,7 @@ Lpoly_tomont_loop:
         mls v18.8h, v24.8h, v4.h[0]
         stur q26, [x0, #-0x40]
         sub x1, x1, #0x1
-        cbnz x1, Lpoly_tomont_loop
+        cbnz x1, Lmlk_poly_tomont_loop
         mul v16.8h, v16.8h, v2.8h
         stur q18, [x0, #-0x20]
         mls v16.8h, v29.8h, v4.h[0]
@@ -89,7 +94,8 @@ Lpoly_tomont_loop:
 
 MLK_ASM_FN_SIZE(poly_tomont_aarch64_asm)
 
-#endif /* MLK_ARITH_BACKEND_AARCH64 && !MLK_CONFIG_MULTILEVEL_NO_SHARED */
+#endif /* MLK_ARITH_BACKEND_AARCH64 && !MLK_CONFIG_MULTILEVEL_NO_SHARED && \
+          !MLK_CONFIG_NO_KEYPAIR_API */
 
 #if defined(__ELF__)
 .section .note.GNU-stack,"",%progbits

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/{polyvec_basemul_acc_montgomery_cached_k2_aarch64_asm.S → mlkem_polyvec_basemul_acc_montgomery_cached_k2_aarch64_asm.S}

@@ -17,6 +17,9 @@
   Description: Re-implementation of asymmetric base multiplication following @[NeonNTT] for k=2
   Signature: void mlk_polyvec_basemul_acc_montgomery_cached_k2_aarch64_asm(int16_t r[256], const int16_t a[512], const int16_t b[512], const int16_t b_cache[256])
   ABI:
+    Architecture: aarch64
+    CallingConvention: AAPCS64
+    Features: [NEON]
     x0:
       type: buffer
       size_bytes: 512
@@ -53,7 +56,7 @@
 
 /*
  * WARNING: This file is auto-derived from the mlkem-native source file
- *   dev/aarch64_opt/src/polyvec_basemul_acc_montgomery_cached_k2_aarch64_asm.S using scripts/simpasm. Do not modify it directly.
+ *   dev/aarch64_opt/src/mlkem_polyvec_basemul_acc_montgomery_cached_k2_aarch64_asm.S using scripts/simpasm. Do not modify it directly.
  */
 
 .text
@@ -156,7 +159,7 @@ MLK_ASM_FN_SYMBOL(polyvec_basemul_acc_montgomery_cached_k2_aarch64_asm)
         uzp2 v19.8h, v11.8h, v4.8h
         sub x13, x13, #0x2
 
-Lpolyvec_basemul_acc_montgomery_cached_k2_loop_start:
+Lmlk_polyvec_basemul_acc_montgomery_cached_k2_loop_start:
         smlal v18.4s, v16.4h, v17.4h
         ldr q7, [x4], #0x20
         ldr q10, [x2, #0x10]
@@ -206,7 +209,7 @@ Lpolyvec_basemul_acc_montgomery_cached_k2_loop_start:
         smull2 v23.4s, v1.8h, v24.8h
         smull v26.4s, v1.4h, v24.4h
         subs x13, x13, #0x1
-        cbnz x13, Lpolyvec_basemul_acc_montgomery_cached_k2_loop_start
+        cbnz x13, Lmlk_polyvec_basemul_acc_montgomery_cached_k2_loop_start
         smlal v26.4s, v6.4h, v20.4h
         smlal2 v23.4s, v6.8h, v20.8h
         smlal v26.4s, v16.4h, v30.4h

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/{polyvec_basemul_acc_montgomery_cached_k3_aarch64_asm.S → mlkem_polyvec_basemul_acc_montgomery_cached_k3_aarch64_asm.S}

@@ -17,6 +17,9 @@
   Description: Re-implementation of asymmetric base multiplication following @[NeonNTT] for k=3
   Signature: void mlk_polyvec_basemul_acc_montgomery_cached_k3_aarch64_asm(int16_t r[256], const int16_t a[768], const int16_t b[768], const int16_t b_cache[384])
   ABI:
+    Architecture: aarch64
+    CallingConvention: AAPCS64
+    Features: [NEON]
     x0:
       type: buffer
       size_bytes: 512
@@ -53,7 +56,7 @@
 
 /*
  * WARNING: This file is auto-derived from the mlkem-native source file
- *   dev/aarch64_opt/src/polyvec_basemul_acc_montgomery_cached_k3_aarch64_asm.S using scripts/simpasm. Do not modify it directly.
+ *   dev/aarch64_opt/src/mlkem_polyvec_basemul_acc_montgomery_cached_k3_aarch64_asm.S using scripts/simpasm. Do not modify it directly.
  */
 
 .text
@@ -178,7 +181,7 @@ MLK_ASM_FN_SYMBOL(polyvec_basemul_acc_montgomery_cached_k3_aarch64_asm)
         mul v14.8h, v14.8h, v2.8h
         sub x13, x13, #0x2
 
-Lpolyvec_basemul_acc_montgomery_cached_k3_loop_start:
+Lmlk_polyvec_basemul_acc_montgomery_cached_k3_loop_start:
         uzp1 v6.8h, v27.8h, v11.8h
         smlal v26.4s, v29.4h, v24.4h
         uzp2 v16.8h, v25.8h, v3.8h
@@ -245,7 +248,7 @@ Lpolyvec_basemul_acc_montgomery_cached_k3_loop_start:
         stur q10, [x0, #-0x10]
         uzp2 v17.8h, v27.8h, v11.8h
         subs x13, x13, #0x1
-        cbnz x13, Lpolyvec_basemul_acc_montgomery_cached_k3_loop_start
+        cbnz x13, Lmlk_polyvec_basemul_acc_montgomery_cached_k3_loop_start
         uzp2 v3.8h, v25.8h, v3.8h
         smull2 v16.4s, v1.8h, v20.8h
         smull v25.4s, v1.4h, v20.4h

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/{polyvec_basemul_acc_montgomery_cached_k4_aarch64_asm.S → mlkem_polyvec_basemul_acc_montgomery_cached_k4_aarch64_asm.S}

@@ -17,6 +17,9 @@
   Description: Re-implementation of asymmetric base multiplication following @[NeonNTT] for k=4
   Signature: void mlk_polyvec_basemul_acc_montgomery_cached_k4_aarch64_asm(int16_t r[256], const int16_t a[1024], const int16_t b[1024], const int16_t b_cache[512])
   ABI:
+    Architecture: aarch64
+    CallingConvention: AAPCS64
+    Features: [NEON]
     x0:
       type: buffer
       size_bytes: 512
@@ -53,7 +56,7 @@
 
 /*
  * WARNING: This file is auto-derived from the mlkem-native source file
- *   dev/aarch64_opt/src/polyvec_basemul_acc_montgomery_cached_k4_aarch64_asm.S using scripts/simpasm. Do not modify it directly.
+ *   dev/aarch64_opt/src/mlkem_polyvec_basemul_acc_montgomery_cached_k4_aarch64_asm.S using scripts/simpasm. Do not modify it directly.
  */
 
 .text
@@ -173,7 +176,7 @@ MLK_ASM_FN_SYMBOL(polyvec_basemul_acc_montgomery_cached_k4_aarch64_asm)
         mul v29.8h, v28.8h, v2.8h
         sub x13, x13, #0x2
 
-Lpolyvec_basemul_acc_montgomery_cached_k4_loop_start:
+Lmlk_polyvec_basemul_acc_montgomery_cached_k4_loop_start:
         smlal2 v23.4s, v30.8h, v21.8h
         ldr q11, [x1], #0x20
         uzp2 v15.8h, v5.8h, v22.8h
@@ -257,7 +260,7 @@ Lpolyvec_basemul_acc_montgomery_cached_k4_loop_start:
         smlal2 v23.4s, v25.8h, v10.8h
         uzp1 v14.8h, v5.8h, v22.8h
         subs x13, x13, #0x1
-        cbnz x13, Lpolyvec_basemul_acc_montgomery_cached_k4_loop_start
+        cbnz x13, Lmlk_polyvec_basemul_acc_montgomery_cached_k4_loop_start
         smlal v18.4s, v29.4h, v0.4h
         ldr q11, [x1], #0x20
         uzp2 v28.8h, v5.8h, v22.8h

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/{rej_uniform_aarch64_asm.S → mlkem_rej_uniform_aarch64_asm.S}

@@ -8,6 +8,9 @@
   Description: Run rejection sampling on uniform random bytes to generate uniform random integers mod q
   Signature: uint64_t mlk_rej_uniform_aarch64_asm(int16_t r[256], const uint8_t *buf, unsigned buflen, const uint8_t table[4096])
   ABI:
+    Architecture: aarch64
+    CallingConvention: AAPCS64
+    Features: [NEON]
     x0:
       type: buffer
       size_bytes: 512
@@ -42,7 +45,7 @@
 
 /*
  * WARNING: This file is auto-derived from the mlkem-native source file
- *   dev/aarch64_opt/src/rej_uniform_aarch64_asm.S using scripts/simpasm. Do not modify it directly.
+ *   dev/aarch64_opt/src/mlkem_rej_uniform_aarch64_asm.S using scripts/simpasm. Do not modify it directly.
  */
 
 .text
@@ -70,23 +73,23 @@ MLK_ASM_FN_SYMBOL(rej_uniform_aarch64_asm)
         mov x11, #0x0               // =0
         eor v16.16b, v16.16b, v16.16b
 
-Lrej_uniform_initial_zero:
+Lmlk_rej_uniform_initial_zero:
         str q16, [x7], #0x40
         stur q16, [x7, #-0x30]
         stur q16, [x7, #-0x20]
         stur q16, [x7, #-0x10]
         add x11, x11, #0x20
         cmp x11, #0x100
-        b.lt Lrej_uniform_initial_zero
+        b.lt Lmlk_rej_uniform_initial_zero
         mov x7, x8
         mov x9, #0x0                // =0
         mov x4, #0x100              // =256
         cmp x2, #0x30
-        b.lo Lrej_uniform_loop48_end
+        b.lo Lmlk_rej_uniform_loop48_end
 
-Lrej_uniform_loop48:
+Lmlk_rej_uniform_loop48:
         cmp x9, x4
-        b.hs Lrej_uniform_memory_copy
+        b.hs Lmlk_rej_uniform_memory_copy
         sub x2, x2, #0x30
         ld3 { v0.16b, v1.16b, v2.16b }, [x1], #48
         zip1 v4.16b, v0.16b, v1.16b
@@ -150,14 +153,13 @@ Lrej_uniform_loop48:
         add x9, x9, x12
         add x9, x9, x14
         cmp x2, #0x30
-        b.hs Lrej_uniform_loop48
+        b.hs Lmlk_rej_uniform_loop48
 
-Lrej_uniform_loop48_end:
+Lmlk_rej_uniform_loop48_end:
         cmp x9, x4
-        b.hs Lrej_uniform_memory_copy
+        b.hs Lmlk_rej_uniform_memory_copy
         cmp x2, #0x18
-        b.lo Lrej_uniform_memory_copy
-        sub x2, x2, #0x18
+        b.lo Lmlk_rej_uniform_memory_copy
         ld3 { v0.8b, v1.8b, v2.8b }, [x1], #24
         zip1 v4.16b, v0.16b, v1.16b
         zip1 v5.16b, v1.16b, v2.16b
@@ -186,17 +188,16 @@ Lrej_uniform_loop48_end:
         st1 { v16.8h }, [x7]
         add x7, x7, x12, lsl #1
         st1 { v17.8h }, [x7]
-        add x7, x7, x13, lsl #1
         add x9, x9, x12
         add x9, x9, x13
 
-Lrej_uniform_memory_copy:
+Lmlk_rej_uniform_memory_copy:
         cmp x9, x4
         csel x9, x9, x4, lo
         mov x11, #0x0               // =0
         mov x7, x8
 
-Lrej_uniform_final_copy:
+Lmlk_rej_uniform_final_copy:
         ldr q16, [x7], #0x40
         ldur q17, [x7, #-0x30]
         ldur q18, [x7, #-0x20]
@@ -207,11 +208,10 @@ Lrej_uniform_final_copy:
         stur q19, [x0, #-0x10]
         add x11, x11, #0x20
         cmp x11, #0x100
-        b.lt Lrej_uniform_final_copy
+        b.lt Lmlk_rej_uniform_final_copy
         mov x0, x9
-        b Lrej_uniform_return
 
-Lrej_uniform_return:
+Lmlk_rej_uniform_return:
         add sp, sp, #0x240
         .cfi_adjust_cfa_offset -0x240
         ret

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/api.h

@@ -144,7 +144,8 @@ __contract__(
   ensures(array_bound(p, 0, MLKEM_N, 0, MLKEM_Q)));
 #endif /* MLK_USE_NATIVE_NTT_CUSTOM_ORDER */
 
-#if defined(MLK_USE_NATIVE_INTT)
+#if defined(MLK_USE_NATIVE_INTT) && \
+    (!defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API))
 /**
  * Compute the inverse negacyclic number-theoretic transform (NTT) of a
  * polynomial in place.
@@ -168,7 +169,8 @@ __contract__(
   ensures((return_value == MLK_NATIVE_FUNC_SUCCESS) ==> array_abs_bound(p, 0, MLKEM_N, MLK_INVNTT_BOUND))
   ensures((return_value == MLK_NATIVE_FUNC_FALLBACK) ==> array_unchanged(p, MLKEM_N))
 );
-#endif /* MLK_USE_NATIVE_INTT */
+#endif /* MLK_USE_NATIVE_INTT && (!MLK_CONFIG_NO_ENCAPS_API || \
+          !MLK_CONFIG_NO_DECAPS_API) */
 
 #if defined(MLK_USE_NATIVE_POLY_REDUCE)
 /**
@@ -191,7 +193,7 @@ __contract__(
 );
 #endif /* MLK_USE_NATIVE_POLY_REDUCE */
 
-#if defined(MLK_USE_NATIVE_POLY_TOMONT)
+#if defined(MLK_USE_NATIVE_POLY_TOMONT) && !defined(MLK_CONFIG_NO_KEYPAIR_API)
 /**
  * In-place conversion of all coefficients of a polynomial from the normal
  * domain to the Montgomery domain.
@@ -210,7 +212,7 @@ __contract__(
   ensures((return_value == MLK_NATIVE_FUNC_SUCCESS) ==> array_abs_bound(p, 0, MLKEM_N, MLKEM_Q))
   ensures((return_value == MLK_NATIVE_FUNC_FALLBACK) ==> array_unchanged(p, MLKEM_N))
 );
-#endif /* MLK_USE_NATIVE_POLY_TOMONT */
+#endif /* MLK_USE_NATIVE_POLY_TOMONT && !MLK_CONFIG_NO_KEYPAIR_API */
 
 #if defined(MLK_USE_NATIVE_POLY_MULCACHE_COMPUTE)
 /**
@@ -340,7 +342,9 @@ __contract__(
 #endif /* MLK_CONFIG_MULTILEVEL_WITH_SHARED || MLKEM_K == 4 */
 #endif /* MLK_USE_NATIVE_POLYVEC_BASEMUL_ACC_MONTGOMERY_CACHED */
 
-#if defined(MLK_USE_NATIVE_POLY_TOBYTES)
+#if defined(MLK_USE_NATIVE_POLY_TOBYTES) && \
+    (!defined(MLK_CONFIG_NO_KEYPAIR_API) || \
+     !defined(MLK_CONFIG_NO_ENCAPS_API))
 /**
  * Serialization of a polynomial with unsigned canonical coefficients.
  *
@@ -362,9 +366,11 @@ __contract__(
   assigns(memory_slice(r, MLKEM_POLYBYTES))
   ensures(return_value == MLK_NATIVE_FUNC_SUCCESS || return_value == MLK_NATIVE_FUNC_FALLBACK)
 );
-#endif /* MLK_USE_NATIVE_POLY_TOBYTES */
+#endif /* MLK_USE_NATIVE_POLY_TOBYTES && (!MLK_CONFIG_NO_KEYPAIR_API || \
+          !MLK_CONFIG_NO_ENCAPS_API) */
 
-#if defined(MLK_USE_NATIVE_POLY_FROMBYTES)
+#if defined(MLK_USE_NATIVE_POLY_FROMBYTES) && \
+    (!defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API))
 /**
  * Deserialization of a polynomial.
  *
@@ -386,7 +392,8 @@ __contract__(
   ensures(return_value == MLK_NATIVE_FUNC_SUCCESS || return_value == MLK_NATIVE_FUNC_FALLBACK)
   ensures((return_value == MLK_NATIVE_FUNC_SUCCESS) ==> array_bound(a, 0, MLKEM_N, 0, MLKEM_UINT12_LIMIT))
 );
-#endif /* MLK_USE_NATIVE_POLY_FROMBYTES */
+#endif /* MLK_USE_NATIVE_POLY_FROMBYTES && (!MLK_CONFIG_NO_ENCAPS_API || \
+          !MLK_CONFIG_NO_DECAPS_API) */
 
 #if defined(MLK_USE_NATIVE_REJ_UNIFORM)
 /**
@@ -419,6 +426,7 @@ __contract__(
 );
 #endif /* MLK_USE_NATIVE_REJ_UNIFORM */
 
+#if !defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API)
 #if defined(MLK_CONFIG_MULTILEVEL_WITH_SHARED) || (MLKEM_K == 2 || MLKEM_K == 3)
 #if defined(MLK_USE_NATIVE_POLY_COMPRESS_D4)
 /**
@@ -470,6 +478,7 @@ __contract__(
   ensures(return_value == MLK_NATIVE_FUNC_SUCCESS || return_value == MLK_NATIVE_FUNC_FALLBACK));
 #endif /* MLK_USE_NATIVE_POLY_COMPRESS_D10 */
 
+#if !defined(MLK_CONFIG_NO_DECAPS_API)
 #if defined(MLK_USE_NATIVE_POLY_DECOMPRESS_D4)
 /**
  * De-serialization and subsequent decompression (4 bits) of a polynomial;
@@ -525,6 +534,7 @@ __contract__(
   ensures(return_value == MLK_NATIVE_FUNC_SUCCESS || return_value == MLK_NATIVE_FUNC_FALLBACK)
   ensures((return_value == MLK_NATIVE_FUNC_SUCCESS) ==> array_bound(r, 0, MLKEM_N, 0, MLKEM_Q)));
 #endif /* MLK_USE_NATIVE_POLY_DECOMPRESS_D10 */
+#endif /* !MLK_CONFIG_NO_DECAPS_API */
 #endif /* MLK_CONFIG_MULTILEVEL_WITH_SHARED || MLKEM_K == 2 || MLKEM_K == 3 */
 
 #if defined(MLK_CONFIG_MULTILEVEL_WITH_SHARED) || MLKEM_K == 4
@@ -578,6 +588,7 @@ __contract__(
   ensures(return_value == MLK_NATIVE_FUNC_SUCCESS || return_value == MLK_NATIVE_FUNC_FALLBACK));
 #endif /* MLK_USE_NATIVE_POLY_COMPRESS_D11 */
 
+#if !defined(MLK_CONFIG_NO_DECAPS_API)
 #if defined(MLK_USE_NATIVE_POLY_DECOMPRESS_D5)
 /**
  * De-serialization and subsequent decompression (5 bits) of a polynomial;
@@ -633,6 +644,8 @@ __contract__(
   ensures(return_value == MLK_NATIVE_FUNC_SUCCESS || return_value == MLK_NATIVE_FUNC_FALLBACK)
   ensures((return_value == MLK_NATIVE_FUNC_SUCCESS) ==> array_bound(r, 0, MLKEM_N, 0, MLKEM_Q)));
 #endif /* MLK_USE_NATIVE_POLY_DECOMPRESS_D11 */
+#endif /* !MLK_CONFIG_NO_DECAPS_API */
 #endif /* MLK_CONFIG_MULTILEVEL_WITH_SHARED || MLKEM_K == 4 */
+#endif /* !MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API */
 
 #endif /* !MLK_NATIVE_API_H */

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/meta.h

@@ -10,7 +10,7 @@
  */
 #include "../sys.h"
 
-#ifdef MLK_SYS_AARCH64
+#ifdef MLK_SYS_AARCH64_NEON
 #include "aarch64/meta.h"
 #endif
 

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/ppc64le/meta.h

@@ -37,6 +37,7 @@ static MLK_INLINE int mlk_ntt_native(int16_t data[MLKEM_N])
 #endif
 }
 
+#if !defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API)
 MLK_MUST_CHECK_RETURN_VALUE
 static MLK_INLINE int mlk_intt_native(int16_t data[MLKEM_N])
 {
@@ -48,6 +49,7 @@ static MLK_INLINE int mlk_intt_native(int16_t data[MLKEM_N])
   return MLK_NATIVE_FUNC_FALLBACK;
 #endif
 }
+#endif /* !MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API */
 
 MLK_MUST_CHECK_RETURN_VALUE
 static MLK_INLINE int mlk_poly_reduce_native(int16_t data[MLKEM_N])
@@ -61,6 +63,7 @@ static MLK_INLINE int mlk_poly_reduce_native(int16_t data[MLKEM_N])
 #endif
 }
 
+#if !defined(MLK_CONFIG_NO_KEYPAIR_API)
 MLK_MUST_CHECK_RETURN_VALUE
 static MLK_INLINE int mlk_poly_tomont_native(int16_t data[MLKEM_N])
 {
@@ -72,6 +75,7 @@ static MLK_INLINE int mlk_poly_tomont_native(int16_t data[MLKEM_N])
   return MLK_NATIVE_FUNC_FALLBACK;
 #endif
 }
+#endif /* !MLK_CONFIG_NO_KEYPAIR_API */
 #endif /* !__ASSEMBLER__ */
 
 #endif /* !MLK_NATIVE_PPC64LE_META_H */

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/ppc64le/src/{intt_ppc_asm.S → mlkem_intt_ppc_asm.S}

@@ -8,11 +8,34 @@
 
 #include "../../../common.h"
 #if defined(MLK_ARITH_BACKEND_PPC64LE_DEFAULT) && \
-    !defined(MLK_CONFIG_MULTILEVEL_NO_SHARED) && defined(__POWER8_VECTOR__)
+    !defined(MLK_CONFIG_MULTILEVEL_NO_SHARED) && defined(__POWER8_VECTOR__) && \
+    (!defined(MLK_CONFIG_NO_ENCAPS_API) || \
+     !defined(MLK_CONFIG_NO_DECAPS_API))
+/*yaml
+  Name: intt_ppc_asm
+  Description: PowerPC64 VSX inverse NTT
+  Signature: void mlk_intt_ppc_asm(int16_t *r, const int16_t *qdata)
+  ABI:
+    Architecture: powerpc64le
+    CallingConvention: ELFv2
+    Features: [VSX]
+    r3:
+      type: buffer
+      size_bytes: 512
+      permissions: read/write
+      c_parameter: int16_t *r
+      description: Input/output polynomial (256 x int16_t)
+    r4:
+      type: buffer
+      size_bytes: 4144
+      permissions: read-only
+      c_parameter: const int16_t *qdata
+      description: Precomputed constants (2072 x int16_t)
+*/
 
 /*
  * WARNING: This file is auto-derived from the mlkem-native source file
- *   dev/ppc64le/src/intt_ppc_asm.S using scripts/simpasm. Do not modify it directly.
+ *   dev/ppc64le/src/mlkem_intt_ppc_asm.S using scripts/simpasm. Do not modify it directly.
  */
 
 .text
@@ -84,7 +107,7 @@ MLK_ASM_FN_SYMBOL(intt_ppc_asm)
         mtctr 8
         xxlor 37, 0, 0
 
-intt_ppc_asm_Loopf:
+mlk_intt_ppc_asm_Loopf:
         lxvd2x 57, 0, 3
         lxvd2x 58, 10, 3
         lxvd2x 62, 11, 3
@@ -129,7 +152,7 @@ intt_ppc_asm_Loopf:
         stxvd2x 55, 17, 3
         stxvd2x 60, 18, 3
         addi 3, 3, 128
-        bdnz intt_ppc_asm_Loopf
+        bdnz mlk_intt_ppc_asm_Loopf
         addi 3, 3, -512
         nop
         nop
@@ -3215,7 +3238,8 @@ intt_ppc_asm_Loopf:
 MLK_ASM_FN_SIZE(intt_ppc_asm)
 
 #endif /* MLK_ARITH_BACKEND_PPC64LE_DEFAULT && !MLK_CONFIG_MULTILEVEL_NO_SHARED \
-          && __POWER8_VECTOR__ */
+          && __POWER8_VECTOR__ && (!MLK_CONFIG_NO_ENCAPS_API || \
+          !MLK_CONFIG_NO_DECAPS_API) */
 
 #if defined(__ELF__)
 .section .note.GNU-stack,"",%progbits

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/ppc64le/src/{ntt_ppc_asm.S → mlkem_ntt_ppc_asm.S}

@@ -9,10 +9,31 @@
 #include "../../../common.h"
 #if defined(MLK_ARITH_BACKEND_PPC64LE_DEFAULT) && \
     !defined(MLK_CONFIG_MULTILEVEL_NO_SHARED) && defined(__POWER8_VECTOR__)
+/*yaml
+  Name: ntt_ppc_asm
+  Description: PowerPC64 VSX forward NTT
+  Signature: void mlk_ntt_ppc_asm(int16_t *r, const int16_t *qdata)
+  ABI:
+    Architecture: powerpc64le
+    CallingConvention: ELFv2
+    Features: [VSX]
+    r3:
+      type: buffer
+      size_bytes: 512
+      permissions: read/write
+      c_parameter: int16_t *r
+      description: Input/output polynomial (256 x int16_t)
+    r4:
+      type: buffer
+      size_bytes: 4144
+      permissions: read-only
+      c_parameter: const int16_t *qdata
+      description: Precomputed constants (2072 x int16_t)
+*/
 
 /*
  * WARNING: This file is auto-derived from the mlkem-native source file
- *   dev/ppc64le/src/ntt_ppc_asm.S using scripts/simpasm. Do not modify it directly.
+ *   dev/ppc64le/src/mlkem_ntt_ppc_asm.S using scripts/simpasm. Do not modify it directly.
  */
 
 .text

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/ppc64le/src/{poly_tomont_ppc_asm.S → mlkem_poly_tomont_ppc_asm.S}

@@ -15,11 +15,33 @@
 
 #include "../../../common.h"
 #if defined(MLK_ARITH_BACKEND_PPC64LE_DEFAULT) && \
-    !defined(MLK_CONFIG_MULTILEVEL_NO_SHARED) && defined(__POWER8_VECTOR__)
+    !defined(MLK_CONFIG_MULTILEVEL_NO_SHARED) && defined(__POWER8_VECTOR__) && \
+    !defined(MLK_CONFIG_NO_KEYPAIR_API)
+/*yaml
+  Name: poly_tomont_ppc_asm
+  Description: PowerPC64 VSX conversion to Montgomery form
+  Signature: void mlk_poly_tomont_ppc_asm(int16_t *r, const int16_t *qdata)
+  ABI:
+    Architecture: powerpc64le
+    CallingConvention: ELFv2
+    Features: [VSX]
+    r3:
+      type: buffer
+      size_bytes: 512
+      permissions: read/write
+      c_parameter: int16_t *r
+      description: Input/output polynomial (256 x int16_t)
+    r4:
+      type: buffer
+      size_bytes: 4144
+      permissions: read-only
+      c_parameter: const int16_t *qdata
+      description: Precomputed constants (2072 x int16_t)
+*/
 
 /*
  * WARNING: This file is auto-derived from the mlkem-native source file
- *   dev/ppc64le/src/poly_tomont_ppc_asm.S using scripts/simpasm. Do not modify it directly.
+ *   dev/ppc64le/src/mlkem_poly_tomont_ppc_asm.S using scripts/simpasm. Do not modify it directly.
  */
 
 .text
@@ -287,7 +309,7 @@ MLK_ASM_FN_SYMBOL(poly_tomont_ppc_asm)
 MLK_ASM_FN_SIZE(poly_tomont_ppc_asm)
 
 #endif /* MLK_ARITH_BACKEND_PPC64LE_DEFAULT && !MLK_CONFIG_MULTILEVEL_NO_SHARED \
-          && __POWER8_VECTOR__ */
+          && __POWER8_VECTOR__ && !MLK_CONFIG_NO_KEYPAIR_API */
 
 #if defined(__ELF__)
 .section .note.GNU-stack,"",%progbits

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/ppc64le/src/{reduce_ppc_asm.S → mlkem_reduce_ppc_asm.S}

@@ -8,10 +8,31 @@
 #include "../../../common.h"
 #if defined(MLK_ARITH_BACKEND_PPC64LE_DEFAULT) && \
     !defined(MLK_CONFIG_MULTILEVEL_NO_SHARED) && defined(__POWER8_VECTOR__)
+/*yaml
+  Name: reduce_ppc_asm
+  Description: PowerPC64 VSX modular reduction
+  Signature: void mlk_reduce_ppc_asm(int16_t *r, const int16_t *qdata)
+  ABI:
+    Architecture: powerpc64le
+    CallingConvention: ELFv2
+    Features: [VSX]
+    r3:
+      type: buffer
+      size_bytes: 512
+      permissions: read/write
+      c_parameter: int16_t *r
+      description: Input/output polynomial (256 x int16_t)
+    r4:
+      type: buffer
+      size_bytes: 4144
+      permissions: read-only
+      c_parameter: const int16_t *qdata
+      description: Precomputed constants (2072 x int16_t)
+*/
 
 /*
  * WARNING: This file is auto-derived from the mlkem-native source file
- *   dev/ppc64le/src/reduce_ppc_asm.S using scripts/simpasm. Do not modify it directly.
+ *   dev/ppc64le/src/mlkem_reduce_ppc_asm.S using scripts/simpasm. Do not modify it directly.
  */
 
 .text

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/riscv64/meta.h

@@ -40,6 +40,7 @@ static MLK_INLINE int mlk_ntt_native(int16_t data[MLKEM_N])
   return MLK_NATIVE_FUNC_SUCCESS;
 }
 
+#if !defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API)
 MLK_MUST_CHECK_RETURN_VALUE
 static MLK_INLINE int mlk_intt_native(int16_t data[MLKEM_N])
 {
@@ -52,13 +53,16 @@ static MLK_INLINE int mlk_intt_native(int16_t data[MLKEM_N])
   mlk_rv64v_poly_invntt_tomont(data);
   return MLK_NATIVE_FUNC_SUCCESS;
 }
+#endif /* !MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API */
 
+#if !defined(MLK_CONFIG_NO_KEYPAIR_API)
 MLK_MUST_CHECK_RETURN_VALUE
 static MLK_INLINE int mlk_poly_tomont_native(int16_t data[MLKEM_N])
 {
   mlk_rv64v_poly_tomont(data);
   return MLK_NATIVE_FUNC_SUCCESS;
 }
+#endif /* !MLK_CONFIG_NO_KEYPAIR_API */
 
 MLK_MUST_CHECK_RETURN_VALUE
 static MLK_INLINE int mlk_rej_uniform_native(int16_t *r, unsigned len,

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/riscv64/src/arith_native_riscv64.h

@@ -10,8 +10,10 @@
 #define mlk_rv64v_poly_ntt MLK_NAMESPACE(ntt_riscv64)
 void mlk_rv64v_poly_ntt(int16_t *);
 
+#if !defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API)
 #define mlk_rv64v_poly_invntt_tomont MLK_NAMESPACE(intt_riscv64)
 void mlk_rv64v_poly_invntt_tomont(int16_t *r);
+#endif
 
 #define mlk_rv64v_poly_basemul_mont_add_k2 MLK_NAMESPACE(basemul_add_k2_riscv64)
 void mlk_rv64v_poly_basemul_mont_add_k2(int16_t *r, const int16_t *a,
@@ -25,8 +27,10 @@ void mlk_rv64v_poly_basemul_mont_add_k3(int16_t *r, const int16_t *a,
 void mlk_rv64v_poly_basemul_mont_add_k4(int16_t *r, const int16_t *a,
                                         const int16_t *b);
 
+#if !defined(MLK_CONFIG_NO_KEYPAIR_API)
 #define mlk_rv64v_poly_tomont MLK_NAMESPACE(tomont_riscv64)
 void mlk_rv64v_poly_tomont(int16_t *r);
+#endif
 
 #define mlk_rv64v_poly_reduce MLK_NAMESPACE(reduce_riscv64)
 void mlk_rv64v_poly_reduce(int16_t *r);