pq_crypto 0.6.3 → 0.6.5

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/riscv64/src/rv64v_poly.c

@@ -78,8 +78,8 @@ static MLK_INLINE vint16m1_t fq_barrett(vint16m1_t a, size_t vl)
  * masked ops, and Zvkt's DIEL guarantee does not cover the v0 mask
  * register. Using an arithmetic-shift sign mask keeps all operands in the
  * Zvkt-covered set and matches the idiom used in the portable C
- * (mlk_ct_cmask_neg_i16, verify.h) and AArch64 (poly_reduce_aarch64_asm.S)
- * implementations. */
+ * (mlk_ct_cmask_neg_i16, verify.h) and AArch64
+ * (mlkem_poly_reduce_aarch64_asm.S) implementations. */
 
 static MLK_INLINE vint16m1_t fq_cadd(vint16m1_t rx, size_t vl)
 {
@@ -324,6 +324,7 @@ void mlk_rv64v_poly_ntt(int16_t *r)
       &r[0xe0], mlk_rv64v_ntt2(__riscv_vcreate_v_i16m1_i16m2(ve, vf), ze), vl2);
 }
 
+#if !defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API)
 /* Reverse / Gentleman-Sande butterfly operation */
 
 #define MLK_RVV_GS_BFLY_RX(u0, u1, ut, uc, vl) \
@@ -604,6 +605,7 @@ void mlk_rv64v_poly_invntt_tomont(int16_t *r)
   __riscv_vse16_v_i16m1(&r[0xe0], ve, vl);
   __riscv_vse16_v_i16m1(&r[0xf0], vf, vl);
 }
+#endif /* !MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API */
 
 /* ML-KEM's middle field GF(3329)[X]/(X^2) multiplication */
 
@@ -682,6 +684,7 @@ void mlk_rv64v_poly_basemul_mont_add_k4(int16_t *r, const int16_t *a,
 }
 #endif /* MLK_CONFIG_MULTILEVEL_WITH_SHARED || MLKEM_K == 4 */
 
+#if !defined(MLK_CONFIG_NO_KEYPAIR_API)
 /**
  * In-place conversion of all coefficients of a polynomial from the normal
  * domain to the Montgomery domain.
@@ -700,6 +703,7 @@ void mlk_rv64v_poly_tomont(int16_t *r)
     __riscv_vse16_v_i16m1(&r[i], vec, vl);
   }
 }
+#endif /* !MLK_CONFIG_NO_KEYPAIR_API */
 
 /**
  * Apply Barrett reduction to all coefficients of a polynomial. For details

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/meta.h

@@ -68,6 +68,7 @@ static MLK_INLINE int mlk_ntt_native(int16_t data[MLKEM_N])
   return MLK_NATIVE_FUNC_SUCCESS;
 }
 
+#if !defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API)
 MLK_MUST_CHECK_RETURN_VALUE
 static MLK_INLINE int mlk_intt_native(int16_t data[MLKEM_N])
 {
@@ -79,6 +80,7 @@ static MLK_INLINE int mlk_intt_native(int16_t data[MLKEM_N])
   mlk_invntt_avx2_asm(data, mlk_qdata);
   return MLK_NATIVE_FUNC_SUCCESS;
 }
+#endif /* !MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API */
 
 MLK_MUST_CHECK_RETURN_VALUE
 static MLK_INLINE int mlk_poly_reduce_native(int16_t data[MLKEM_N])
@@ -92,6 +94,7 @@ static MLK_INLINE int mlk_poly_reduce_native(int16_t data[MLKEM_N])
   return MLK_NATIVE_FUNC_SUCCESS;
 }
 
+#if !defined(MLK_CONFIG_NO_KEYPAIR_API)
 MLK_MUST_CHECK_RETURN_VALUE
 static MLK_INLINE int mlk_poly_tomont_native(int16_t data[MLKEM_N])
 {
@@ -103,6 +106,7 @@ static MLK_INLINE int mlk_poly_tomont_native(int16_t data[MLKEM_N])
   mlk_tomont_avx2_asm(data);
   return MLK_NATIVE_FUNC_SUCCESS;
 }
+#endif /* !MLK_CONFIG_NO_KEYPAIR_API */
 
 MLK_MUST_CHECK_RETURN_VALUE
 static MLK_INLINE int mlk_poly_mulcache_compute_native(int16_t x[MLKEM_N / 2],
@@ -165,6 +169,7 @@ static MLK_INLINE int mlk_polyvec_basemul_acc_montgomery_cached_k4_native(
 }
 #endif /* MLK_CONFIG_MULTILEVEL_WITH_SHARED || MLKEM_K == 4 */
 
+#if !defined(MLK_CONFIG_NO_KEYPAIR_API) || !defined(MLK_CONFIG_NO_ENCAPS_API)
 MLK_MUST_CHECK_RETURN_VALUE
 static MLK_INLINE int mlk_poly_tobytes_native(uint8_t r[MLKEM_POLYBYTES],
                                               const int16_t a[MLKEM_N])
@@ -177,7 +182,9 @@ static MLK_INLINE int mlk_poly_tobytes_native(uint8_t r[MLKEM_POLYBYTES],
   mlk_ntttobytes_avx2_asm(r, a);
   return MLK_NATIVE_FUNC_SUCCESS;
 }
+#endif /* !MLK_CONFIG_NO_KEYPAIR_API || !MLK_CONFIG_NO_ENCAPS_API */
 
+#if !defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API)
 MLK_MUST_CHECK_RETURN_VALUE
 static MLK_INLINE int mlk_poly_frombytes_native(
     int16_t r[MLKEM_N], const uint8_t a[MLKEM_POLYBYTES])
@@ -190,8 +197,12 @@ static MLK_INLINE int mlk_poly_frombytes_native(
   mlk_nttfrombytes_avx2_asm(r, a);
   return MLK_NATIVE_FUNC_SUCCESS;
 }
+#endif /* !MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API */
 
-#if defined(MLK_CONFIG_MULTILEVEL_WITH_SHARED) || (MLKEM_K == 2 || MLKEM_K == 3)
+#if (!defined(MLK_CONFIG_NO_ENCAPS_API) ||                         \
+     !defined(MLK_CONFIG_NO_DECAPS_API)) &&                        \
+    (defined(MLK_CONFIG_MULTILEVEL_WITH_SHARED) || MLKEM_K == 2 || \
+     MLKEM_K == 3)
 MLK_MUST_CHECK_RETURN_VALUE
 static MLK_INLINE int mlk_poly_compress_d4_native(
     uint8_t r[MLKEM_POLYCOMPRESSEDBYTES_D4], const int16_t a[MLKEM_N])
@@ -218,6 +229,7 @@ static MLK_INLINE int mlk_poly_compress_d10_native(
   return MLK_NATIVE_FUNC_SUCCESS;
 }
 
+#if !defined(MLK_CONFIG_NO_DECAPS_API)
 MLK_MUST_CHECK_RETURN_VALUE
 static MLK_INLINE int mlk_poly_decompress_d4_native(
     int16_t r[MLKEM_N], const uint8_t a[MLKEM_POLYCOMPRESSEDBYTES_D4])
@@ -243,9 +255,14 @@ static MLK_INLINE int mlk_poly_decompress_d10_native(
   mlk_poly_decompress_d10_avx2_asm(r, a, mlk_decompress_d10_data);
   return MLK_NATIVE_FUNC_SUCCESS;
 }
-#endif /* MLK_CONFIG_MULTILEVEL_WITH_SHARED || MLKEM_K == 2 || MLKEM_K == 3 */
-
-#if defined(MLK_CONFIG_MULTILEVEL_WITH_SHARED) || MLKEM_K == 4
+#endif /* !MLK_CONFIG_NO_DECAPS_API */
+#endif /* (!MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API) &&         \
+          (MLK_CONFIG_MULTILEVEL_WITH_SHARED || MLKEM_K == 2 || MLKEM_K == 3) \
+        */
+
+#if (!defined(MLK_CONFIG_NO_ENCAPS_API) ||  \
+     !defined(MLK_CONFIG_NO_DECAPS_API)) && \
+    (defined(MLK_CONFIG_MULTILEVEL_WITH_SHARED) || MLKEM_K == 4)
 MLK_MUST_CHECK_RETURN_VALUE
 static MLK_INLINE int mlk_poly_compress_d5_native(
     uint8_t r[MLKEM_POLYCOMPRESSEDBYTES_D5], const int16_t a[MLKEM_N])
@@ -272,6 +289,7 @@ static MLK_INLINE int mlk_poly_compress_d11_native(
   return MLK_NATIVE_FUNC_SUCCESS;
 }
 
+#if !defined(MLK_CONFIG_NO_DECAPS_API)
 MLK_MUST_CHECK_RETURN_VALUE
 static MLK_INLINE int mlk_poly_decompress_d5_native(
     int16_t r[MLKEM_N], const uint8_t a[MLKEM_POLYCOMPRESSEDBYTES_D5])
@@ -297,7 +315,9 @@ static MLK_INLINE int mlk_poly_decompress_d11_native(
   mlk_poly_decompress_d11_avx2_asm(r, a, mlk_decompress_d11_data);
   return MLK_NATIVE_FUNC_SUCCESS;
 }
-#endif /* MLK_CONFIG_MULTILEVEL_WITH_SHARED || MLKEM_K == 4 */
+#endif /* !MLK_CONFIG_NO_DECAPS_API */
+#endif /* (!MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API) && \
+          (MLK_CONFIG_MULTILEVEL_WITH_SHARED || MLKEM_K == 4) */
 
 #endif /* !__ASSEMBLER__ */
 

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/arith_native_x86_64.h

@@ -22,7 +22,7 @@ MLK_MUST_CHECK_RETURN_VALUE MLK_SYSV_ABI
 uint64_t mlk_rej_uniform_avx2_asm(int16_t *r, const uint8_t *buf,
                                   unsigned buflen, const uint8_t *table)
 /* This must be kept in sync with the HOL-Light specification
- * in proofs/hol_light/x86_64/proofs/rej_uniform_avx2_asm.ml. */
+ * in proofs/hol_light/x86_64/proofs/mlkem_rej_uniform_avx2_asm.ml. */
 __contract__(
     requires(buflen % 12 == 0)
     requires(memory_no_alias(buf, buflen))
@@ -37,7 +37,7 @@ __contract__(
 MLK_SYSV_ABI
 void mlk_ntt_avx2_asm(int16_t *r, const int16_t *qdata)
 /* This must be kept in sync with the HOL-Light specification
- * in proofs/hol_light/x86_64/proofs/ntt_avx2_asm.ml */
+ * in proofs/hol_light/x86_64/proofs/mlkem_ntt_avx2_asm.ml */
 __contract__(
   requires(memory_no_alias(r, sizeof(int16_t) * MLKEM_N))
   requires(array_abs_bound(r, 0, MLKEM_N, 8192))
@@ -52,7 +52,7 @@ __contract__(
 MLK_SYSV_ABI
 void mlk_invntt_avx2_asm(int16_t *r, const int16_t *qdata)
 /* This must be kept in sync with the HOL-Light specification
- * in proofs/hol_light/x86_64/proofs/intt_avx2_asm.ml */
+ * in proofs/hol_light/x86_64/proofs/mlkem_intt_avx2_asm.ml */
 __contract__(
   requires(memory_no_alias(r, sizeof(int16_t) * MLKEM_N))
   requires(qdata == mlk_qdata)
@@ -66,7 +66,7 @@ __contract__(
 MLK_SYSV_ABI
 void mlk_nttunpack_avx2_asm(int16_t *r)
 /* This must be kept in sync with the HOL-Light specification
- * in proofs/hol_light/x86_64/proofs/nttunpack_avx2_asm.ml */
+ * in proofs/hol_light/x86_64/proofs/mlkem_nttunpack_avx2_asm.ml */
 __contract__(
   requires(memory_no_alias(r, sizeof(int16_t) * MLKEM_N))
   requires(array_bound(r, 0, MLKEM_N, 0, MLKEM_Q))
@@ -81,7 +81,7 @@ __contract__(
 MLK_SYSV_ABI
 void mlk_reduce_avx2_asm(int16_t *r)
 /* This must be kept in sync with the HOL-Light specification
- * in proofs/hol_light/x86_64/proofs/reduce_avx2_asm.ml */
+ * in proofs/hol_light/x86_64/proofs/mlkem_reduce_avx2_asm.ml */
 __contract__(
   requires(memory_no_alias(r, sizeof(int16_t) * MLKEM_N))
   assigns(memory_slice(r, sizeof(int16_t) * MLKEM_N))
@@ -94,7 +94,7 @@ MLK_SYSV_ABI
 void mlk_poly_mulcache_compute_avx2_asm(int16_t *out, const int16_t *in,
                                         const int16_t *qdata)
 /* This must be kept in sync with the HOL-Light specification
- * in proofs/hol_light/x86_64/proofs/poly_mulcache_compute_avx2_asm.ml */
+ * in proofs/hol_light/x86_64/proofs/mlkem_poly_mulcache_compute_avx2_asm.ml */
 __contract__(
   requires(memory_no_alias(out, sizeof(int16_t) * (MLKEM_N / 2)))
   requires(memory_no_alias(in, sizeof(int16_t) * MLKEM_N))
@@ -109,7 +109,7 @@ MLK_SYSV_ABI
 void mlk_polyvec_basemul_acc_montgomery_cached_k2_avx2_asm(
     int16_t *r, const int16_t *a, const int16_t *b, const int16_t *b_cache)
 /* This must be kept in sync with the HOL-Light specification in
- * proofs/hol_light/x86_64/proofs/polyvec_basemul_acc_montgomery_cached_k2_avx2_asm.ml.
+ * proofs/hol_light/x86_64/proofs/mlkem_polyvec_basemul_acc_montgomery_cached_k2_avx2_asm.ml.
  */
 __contract__(
     requires(memory_no_alias(r, sizeof(int16_t) * MLKEM_N))
@@ -126,7 +126,7 @@ MLK_SYSV_ABI
 void mlk_polyvec_basemul_acc_montgomery_cached_k3_avx2_asm(
     int16_t *r, const int16_t *a, const int16_t *b, const int16_t *b_cache)
 /* This must be kept in sync with the HOL-Light specification in
- * proofs/hol_light/x86_64/proofs/polyvec_basemul_acc_montgomery_cached_k3_avx2_asm.ml.
+ * proofs/hol_light/x86_64/proofs/mlkem_polyvec_basemul_acc_montgomery_cached_k3_avx2_asm.ml.
  */
 __contract__(
     requires(memory_no_alias(r, sizeof(int16_t) * MLKEM_N))
@@ -143,7 +143,7 @@ MLK_SYSV_ABI
 void mlk_polyvec_basemul_acc_montgomery_cached_k4_avx2_asm(
     int16_t *r, const int16_t *a, const int16_t *b, const int16_t *b_cache)
 /* This must be kept in sync with the HOL-Light specification in
- * proofs/hol_light/x86_64/proofs/polyvec_basemul_acc_montgomery_cached_k4_avx2_asm.ml.
+ * proofs/hol_light/x86_64/proofs/mlkem_polyvec_basemul_acc_montgomery_cached_k4_avx2_asm.ml.
  */
 __contract__(
     requires(memory_no_alias(r, sizeof(int16_t) * MLKEM_N))
@@ -158,7 +158,7 @@ __contract__(
 MLK_SYSV_ABI
 void mlk_ntttobytes_avx2_asm(uint8_t *r, const int16_t *a)
 /* This must be kept in sync with the HOL-Light specification in
- * proofs/hol_light/x86_64/proofs/ntttobytes_avx2_asm.ml.
+ * proofs/hol_light/x86_64/proofs/mlkem_ntttobytes_avx2_asm.ml.
  */
 __contract__(
   requires(memory_no_alias(r, MLKEM_POLYBYTES))
@@ -171,7 +171,7 @@ __contract__(
 MLK_SYSV_ABI
 void mlk_nttfrombytes_avx2_asm(int16_t *r, const uint8_t *a)
 /* This must be kept in sync with the HOL-Light specification in
- * proofs/hol_light/x86_64/proofs/nttfrombytes_avx2_asm.ml.
+ * proofs/hol_light/x86_64/proofs/mlkem_nttfrombytes_avx2_asm.ml.
  */
 __contract__(
   requires(memory_no_alias(a, MLKEM_POLYBYTES))
@@ -184,7 +184,7 @@ __contract__(
 MLK_SYSV_ABI
 void mlk_tomont_avx2_asm(int16_t *r)
 /* This must be kept in sync with the HOL-Light specification in
- * proofs/hol_light/x86_64/proofs/tomont_avx2_asm.ml.
+ * proofs/hol_light/x86_64/proofs/mlkem_tomont_avx2_asm.ml.
  */
 __contract__(
   requires(memory_no_alias(r, sizeof(int16_t) * MLKEM_N))
@@ -198,7 +198,7 @@ void mlk_poly_compress_d4_avx2_asm(uint8_t r[MLKEM_POLYCOMPRESSEDBYTES_D4],
                                    const int16_t *MLK_RESTRICT a,
                                    const uint8_t *data)
 /* This must be kept in sync with the HOL-Light specification in
- * proofs/hol_light/x86_64/proofs/poly_compress_d4_avx2_asm.ml.
+ * proofs/hol_light/x86_64/proofs/mlkem_poly_compress_d4_avx2_asm.ml.
  */
 __contract__(
   requires(memory_no_alias(r, MLKEM_POLYCOMPRESSEDBYTES_D4))
@@ -215,7 +215,7 @@ void mlk_poly_decompress_d4_avx2_asm(
     int16_t *MLK_RESTRICT r, const uint8_t a[MLKEM_POLYCOMPRESSEDBYTES_D4],
     const uint8_t *data)
 /* This must be kept in sync with the HOL-Light specification in
- * proofs/hol_light/x86_64/proofs/poly_decompress_d4_avx2_asm.ml.
+ * proofs/hol_light/x86_64/proofs/mlkem_poly_decompress_d4_avx2_asm.ml.
  */
 __contract__(
   requires(memory_no_alias(r, sizeof(int16_t) * MLKEM_N))
@@ -231,7 +231,7 @@ void mlk_poly_compress_d10_avx2_asm(uint8_t r[MLKEM_POLYCOMPRESSEDBYTES_D10],
                                     const int16_t *MLK_RESTRICT a,
                                     const uint8_t *data)
 /* This must be kept in sync with the HOL-Light specification in
- * proofs/hol_light/x86_64/proofs/poly_compress_d10_avx2_asm.ml.
+ * proofs/hol_light/x86_64/proofs/mlkem_poly_compress_d10_avx2_asm.ml.
  */
 __contract__(
   requires(memory_no_alias(r, MLKEM_POLYCOMPRESSEDBYTES_D10))
@@ -248,7 +248,7 @@ void mlk_poly_decompress_d10_avx2_asm(
     int16_t *MLK_RESTRICT r, const uint8_t a[MLKEM_POLYCOMPRESSEDBYTES_D10],
     const uint8_t *data)
 /* This must be kept in sync with the HOL-Light specification in
- * proofs/hol_light/x86_64/proofs/poly_decompress_d10_avx2_asm.ml.
+ * proofs/hol_light/x86_64/proofs/mlkem_poly_decompress_d10_avx2_asm.ml.
  */
 __contract__(
   requires(memory_no_alias(r, sizeof(int16_t) * MLKEM_N))
@@ -264,7 +264,7 @@ void mlk_poly_compress_d5_avx2_asm(uint8_t r[MLKEM_POLYCOMPRESSEDBYTES_D5],
                                    const int16_t *MLK_RESTRICT a,
                                    const uint8_t *data)
 /* This must be kept in sync with the HOL-Light specification in
- * proofs/hol_light/x86_64/proofs/poly_compress_d5_avx2_asm.ml.
+ * proofs/hol_light/x86_64/proofs/mlkem_poly_compress_d5_avx2_asm.ml.
  */
 __contract__(
   requires(memory_no_alias(r, MLKEM_POLYCOMPRESSEDBYTES_D5))
@@ -281,7 +281,7 @@ void mlk_poly_decompress_d5_avx2_asm(
     int16_t *MLK_RESTRICT r, const uint8_t a[MLKEM_POLYCOMPRESSEDBYTES_D5],
     const uint8_t *data)
 /* This must be kept in sync with the HOL-Light specification in
- * proofs/hol_light/x86_64/proofs/poly_decompress_d5_avx2_asm.ml.
+ * proofs/hol_light/x86_64/proofs/mlkem_poly_decompress_d5_avx2_asm.ml.
  */
 __contract__(
   requires(memory_no_alias(r, sizeof(int16_t) * MLKEM_N))
@@ -297,7 +297,7 @@ void mlk_poly_compress_d11_avx2_asm(uint8_t r[MLKEM_POLYCOMPRESSEDBYTES_D11],
                                     const int16_t *MLK_RESTRICT a,
                                     const uint8_t *data)
 /* This must be kept in sync with the HOL-Light specification in
- * proofs/hol_light/x86_64/proofs/poly_compress_d11_avx2_asm.ml.
+ * proofs/hol_light/x86_64/proofs/mlkem_poly_compress_d11_avx2_asm.ml.
  */
 __contract__(
   requires(memory_no_alias(r, MLKEM_POLYCOMPRESSEDBYTES_D11))
@@ -314,7 +314,7 @@ void mlk_poly_decompress_d11_avx2_asm(
     int16_t *MLK_RESTRICT r, const uint8_t a[MLKEM_POLYCOMPRESSEDBYTES_D11],
     const uint8_t *data)
 /* This must be kept in sync with the HOL-Light specification in
- * proofs/hol_light/x86_64/proofs/poly_decompress_d11_avx2_asm.ml.
+ * proofs/hol_light/x86_64/proofs/mlkem_poly_decompress_d11_avx2_asm.ml.
  */
 __contract__(
   requires(memory_no_alias(r, sizeof(int16_t) * MLKEM_N))

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/compress_consts.c

@@ -11,7 +11,8 @@
 
 #include "../../../common.h"
 
-#if defined(MLK_ARITH_BACKEND_X86_64_DEFAULT)
+#if defined(MLK_ARITH_BACKEND_X86_64_DEFAULT) && \
+    (!defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API))
 
 #include "compress_consts.h"
 
@@ -25,11 +26,13 @@ MLK_ALIGN MLK_INTERNAL_DATA_DEFINITION const uint8_t
         2, 0, 0, 0, 6, 0, 0, 0, 3, 0, 0, 0, 7, 0, 0, 0, /* permdidx */
 };
 
+#if !defined(MLK_CONFIG_NO_DECAPS_API)
 MLK_ALIGN MLK_INTERNAL_DATA_DEFINITION const uint8_t
     mlk_decompress_d4_data[32] = {
         0, 0, 0, 0, 1, 1, 1, 1, 2, 2, 2, 2, 3, 3, 3, 3,
         4, 4, 4, 4, 5, 5, 5, 5, 6, 6, 6, 6, 7, 7, 7, 7, /* shufbidx */
 };
+#endif /* !MLK_CONFIG_NO_DECAPS_API */
 
 MLK_ALIGN MLK_INTERNAL_DATA_DEFINITION const uint8_t
     mlk_compress_d10_data[32] = {
@@ -38,11 +41,13 @@ MLK_ALIGN MLK_INTERNAL_DATA_DEFINITION const uint8_t
         255, 255, 255, 255, 0,   1, 2,  3,  4,  8, /* shufbidx */
 };
 
+#if !defined(MLK_CONFIG_NO_DECAPS_API)
 MLK_ALIGN MLK_INTERNAL_DATA_DEFINITION const uint8_t
     mlk_decompress_d10_data[32] = {
         0, 1, 1, 2, 2, 3, 3, 4, 5, 6, 6, 7, 7, 8,  8,  9,
         2, 3, 3, 4, 4, 5, 5, 6, 7, 8, 8, 9, 9, 10, 10, 11, /* shufbidx */
 };
+#endif /* !MLK_CONFIG_NO_DECAPS_API */
 
 #endif /* !MLK_CONFIG_MULTILEVEL_NO_SHARED &&                                 \
           (MLK_CONFIG_MULTILEVEL_WITH_SHARED || MLKEM_K == 2 || MLKEM_K == 3) \
@@ -58,6 +63,7 @@ MLK_ALIGN MLK_INTERNAL_DATA_DEFINITION const uint8_t
         1, 2,  3,  4,  255, 255, 255, 255, 255, 8, /* shufbidx */
 };
 
+#if !defined(MLK_CONFIG_NO_DECAPS_API)
 /* shufbidx[0:32], mask[32:64], shift[64:96] */
 MLK_ALIGN MLK_INTERNAL_DATA_DEFINITION const uint8_t
     mlk_decompress_d5_data[96] = {
@@ -68,6 +74,7 @@ MLK_ALIGN MLK_INTERNAL_DATA_DEFINITION const uint8_t
         0,   4, 32,  0, 0,   1,  8,   0,  64,  0, 0,   2, 16,  0, 128, 0, 0,  4,
         32,  0, 0,   1, 8,   0,  64,  0,  0,   2, 16,  0, 128, 0, /* shift */
 };
+#endif /* !MLK_CONFIG_NO_DECAPS_API */
 
 /* srlvqidx[0:32], shufbidx[32:64] */
 MLK_ALIGN MLK_INTERNAL_DATA_DEFINITION const uint8_t
@@ -81,6 +88,7 @@ MLK_ALIGN MLK_INTERNAL_DATA_DEFINITION const uint8_t
             255, 255, 255, 255, 0,   0,  1, 2, 3,  4, /* shufbidx */
 };
 
+#if !defined(MLK_CONFIG_NO_DECAPS_API)
 /* shufbidx[0:32], srlvdidx[32:64], srlvqidx[64:96], shift[96:128] */
 MLK_ALIGN MLK_INTERNAL_DATA_DEFINITION const uint8_t
     mlk_decompress_d11_data[128] = {
@@ -93,12 +101,15 @@ MLK_ALIGN MLK_INTERNAL_DATA_DEFINITION const uint8_t
         32, 0, 4, 0, 1, 0, 32, 0, 8, 0, 1, 0,  32, 0,  4,  0,
         32, 0, 4, 0, 1, 0, 32, 0, 8, 0, 1, 0,  32, 0,  4,  0, /* shift */
 };
+#endif /* !MLK_CONFIG_NO_DECAPS_API */
 
 #endif /* !MLK_CONFIG_MULTILEVEL_NO_SHARED && \
           (MLK_CONFIG_MULTILEVEL_WITH_SHARED || MLKEM_K == 4) */
 
-#else /* MLK_ARITH_BACKEND_X86_64_DEFAULT */
+#else /* MLK_ARITH_BACKEND_X86_64_DEFAULT && (!MLK_CONFIG_NO_ENCAPS_API || \
+         !MLK_CONFIG_NO_DECAPS_API) */
 
 MLK_EMPTY_CU(avx2_compress_consts)
 
-#endif /* !MLK_ARITH_BACKEND_X86_64_DEFAULT */
+#endif /* !(MLK_ARITH_BACKEND_X86_64_DEFAULT && (!MLK_CONFIG_NO_ENCAPS_API || \
+          !MLK_CONFIG_NO_DECAPS_API)) */

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/compress_consts.h

@@ -19,26 +19,34 @@
 #define mlk_compress_d4_data MLK_NAMESPACE(compress_d4_data)
 MLK_INTERNAL_DATA_DECLARATION const uint8_t mlk_compress_d4_data[32];
 
+#if !defined(MLK_CONFIG_NO_DECAPS_API)
 #define mlk_decompress_d4_data MLK_NAMESPACE(decompress_d4_data)
 MLK_INTERNAL_DATA_DECLARATION const uint8_t mlk_decompress_d4_data[32];
+#endif
 
 #define mlk_compress_d10_data MLK_NAMESPACE(compress_d10_data)
 MLK_INTERNAL_DATA_DECLARATION const uint8_t mlk_compress_d10_data[32];
 
+#if !defined(MLK_CONFIG_NO_DECAPS_API)
 #define mlk_decompress_d10_data MLK_NAMESPACE(decompress_d10_data)
 MLK_INTERNAL_DATA_DECLARATION const uint8_t mlk_decompress_d10_data[32];
+#endif
 
 #define mlk_compress_d5_data MLK_NAMESPACE(compress_d5_data)
 MLK_INTERNAL_DATA_DECLARATION const uint8_t mlk_compress_d5_data[32];
 
+#if !defined(MLK_CONFIG_NO_DECAPS_API)
 #define mlk_decompress_d5_data MLK_NAMESPACE(decompress_d5_data)
 MLK_INTERNAL_DATA_DECLARATION const uint8_t mlk_decompress_d5_data[96];
+#endif
 
 #define mlk_compress_d11_data MLK_NAMESPACE(compress_d11_data)
 MLK_INTERNAL_DATA_DECLARATION const uint8_t mlk_compress_d11_data[64];
 
+#if !defined(MLK_CONFIG_NO_DECAPS_API)
 #define mlk_decompress_d11_data MLK_NAMESPACE(decompress_d11_data)
 MLK_INTERNAL_DATA_DECLARATION const uint8_t mlk_decompress_d11_data[128];
+#endif
 
 #endif /* !__ASSEMBLER__ */
 

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/{intt_avx2_asm.S → mlkem_intt_avx2_asm.S}

@@ -30,11 +30,35 @@
 
 #include "../../../common.h"
 #if defined(MLK_ARITH_BACKEND_X86_64_DEFAULT) && \
-    !defined(MLK_CONFIG_MULTILEVEL_NO_SHARED)
+    !defined(MLK_CONFIG_MULTILEVEL_NO_SHARED) && \
+    (!defined(MLK_CONFIG_NO_ENCAPS_API) || \
+     !defined(MLK_CONFIG_NO_DECAPS_API))
+/*yaml
+  Name: invntt_avx2_asm
+  Description: x86_64 AVX2 inverse NTT
+  Signature: void mlk_invntt_avx2_asm(int16_t *r, const int16_t *qdata)
+  ABI:
+    Architecture: x86_64
+    CallingConvention: SysV
+    Features: [AVX2]
+    rdi:
+      type: buffer
+      size_bytes: 512
+      permissions: read/write
+      c_parameter: int16_t *r
+      description: Input/output polynomial (256 x int16_t)
+    rsi:
+      type: buffer
+      size_bytes: 1248
+      permissions: read-only
+      c_parameter: const int16_t *qdata
+      description: Precomputed constants (624 x int16_t)
+*/
+
 
 /*
  * WARNING: This file is auto-derived from the mlkem-native source file
- *   dev/x86_64/src/intt_avx2_asm.S using scripts/simpasm. Do not modify it directly.
+ *   dev/x86_64/src/mlkem_intt_avx2_asm.S using scripts/simpasm. Do not modify it directly.
  */
 
 .text
@@ -712,7 +736,7 @@ MLK_ASM_FN_SYMBOL(invntt_avx2_asm)
 MLK_ASM_FN_SIZE(invntt_avx2_asm)
 
 #endif /* MLK_ARITH_BACKEND_X86_64_DEFAULT && !MLK_CONFIG_MULTILEVEL_NO_SHARED \
-        */
+          && (!MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API) */
 
 #if defined(__ELF__)
 .section .note.GNU-stack,"",%progbits

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/{ntt_avx2_asm.S → mlkem_ntt_avx2_asm.S}

@@ -27,10 +27,32 @@
 #include "../../../common.h"
 #if defined(MLK_ARITH_BACKEND_X86_64_DEFAULT) && \
     !defined(MLK_CONFIG_MULTILEVEL_NO_SHARED)
+/*yaml
+  Name: ntt_avx2_asm
+  Description: x86_64 AVX2 forward NTT
+  Signature: void mlk_ntt_avx2_asm(int16_t *r, const int16_t *qdata)
+  ABI:
+    Architecture: x86_64
+    CallingConvention: SysV
+    Features: [AVX2]
+    rdi:
+      type: buffer
+      size_bytes: 512
+      permissions: read/write
+      c_parameter: int16_t *r
+      description: Input/output polynomial (256 x int16_t)
+    rsi:
+      type: buffer
+      size_bytes: 1248
+      permissions: read-only
+      c_parameter: const int16_t *qdata
+      description: Precomputed constants (624 x int16_t)
+*/
+
 
 /*
  * WARNING: This file is auto-derived from the mlkem-native source file
- *   dev/x86_64/src/ntt_avx2_asm.S using scripts/simpasm. Do not modify it directly.
+ *   dev/x86_64/src/mlkem_ntt_avx2_asm.S using scripts/simpasm. Do not modify it directly.
  */
 
 .text

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/{nttfrombytes_avx2_asm.S → mlkem_nttfrombytes_avx2_asm.S}

@@ -20,11 +20,35 @@
 #include "../../../common.h"
 
 #if defined(MLK_ARITH_BACKEND_X86_64_DEFAULT) && \
-    !defined(MLK_CONFIG_MULTILEVEL_NO_SHARED)
+    !defined(MLK_CONFIG_MULTILEVEL_NO_SHARED) && \
+    (!defined(MLK_CONFIG_NO_ENCAPS_API) || \
+     !defined(MLK_CONFIG_NO_DECAPS_API))
+/*yaml
+  Name: nttfrombytes_avx2_asm
+  Description: x86_64 AVX2 polynomial deserialization in NTT domain
+  Signature: void mlk_nttfrombytes_avx2_asm(int16_t *r, const uint8_t *a)
+  ABI:
+    Architecture: x86_64
+    CallingConvention: SysV
+    Features: [AVX2]
+    rdi:
+      type: buffer
+      size_bytes: 512
+      permissions: write-only
+      c_parameter: int16_t *r
+      description: Output polynomial (256 x int16_t)
+    rsi:
+      type: buffer
+      size_bytes: 384
+      permissions: read-only
+      c_parameter: const uint8_t *a
+      description: Input byte array (MLKEM_POLYBYTES = 384)
+*/
+
 
 /*
  * WARNING: This file is auto-derived from the mlkem-native source file
- *   dev/x86_64/src/nttfrombytes_avx2_asm.S using scripts/simpasm. Do not modify it directly.
+ *   dev/x86_64/src/mlkem_nttfrombytes_avx2_asm.S using scripts/simpasm. Do not modify it directly.
  */
 
 .text
@@ -186,7 +210,7 @@ MLK_ASM_FN_SYMBOL(nttfrombytes_avx2_asm)
 MLK_ASM_FN_SIZE(nttfrombytes_avx2_asm)
 
 #endif /* MLK_ARITH_BACKEND_X86_64_DEFAULT && !MLK_CONFIG_MULTILEVEL_NO_SHARED \
-        */
+          && (!MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API) */
 
 #if defined(__ELF__)
 .section .note.GNU-stack,"",%progbits

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/{ntttobytes_avx2_asm.S → mlkem_ntttobytes_avx2_asm.S}

@@ -20,11 +20,35 @@
 #include "../../../common.h"
 
 #if defined(MLK_ARITH_BACKEND_X86_64_DEFAULT) && \
-    !defined(MLK_CONFIG_MULTILEVEL_NO_SHARED)
+    !defined(MLK_CONFIG_MULTILEVEL_NO_SHARED) && \
+    (!defined(MLK_CONFIG_NO_KEYPAIR_API) || \
+     !defined(MLK_CONFIG_NO_ENCAPS_API))
+/*yaml
+  Name: ntttobytes_avx2_asm
+  Description: x86_64 AVX2 polynomial serialization in NTT domain
+  Signature: void mlk_ntttobytes_avx2_asm(uint8_t *r, const int16_t *a)
+  ABI:
+    Architecture: x86_64
+    CallingConvention: SysV
+    Features: [AVX2]
+    rdi:
+      type: buffer
+      size_bytes: 384
+      permissions: write-only
+      c_parameter: uint8_t *r
+      description: Output byte array (MLKEM_POLYBYTES = 384)
+    rsi:
+      type: buffer
+      size_bytes: 512
+      permissions: read-only
+      c_parameter: const int16_t *a
+      description: Input polynomial (256 x int16_t)
+*/
+
 
 /*
  * WARNING: This file is auto-derived from the mlkem-native source file
- *   dev/x86_64/src/ntttobytes_avx2_asm.S using scripts/simpasm. Do not modify it directly.
+ *   dev/x86_64/src/mlkem_ntttobytes_avx2_asm.S using scripts/simpasm. Do not modify it directly.
  */
 
 .text
@@ -174,7 +198,7 @@ MLK_ASM_FN_SYMBOL(ntttobytes_avx2_asm)
 MLK_ASM_FN_SIZE(ntttobytes_avx2_asm)
 
 #endif /* MLK_ARITH_BACKEND_X86_64_DEFAULT && !MLK_CONFIG_MULTILEVEL_NO_SHARED \
-        */
+          && (!MLK_CONFIG_NO_KEYPAIR_API || !MLK_CONFIG_NO_ENCAPS_API) */
 
 #if defined(__ELF__)
 .section .note.GNU-stack,"",%progbits

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/{nttunpack_avx2_asm.S → mlkem_nttunpack_avx2_asm.S}

@@ -21,10 +21,26 @@
 
 #if defined(MLK_ARITH_BACKEND_X86_64_DEFAULT) && \
     !defined(MLK_CONFIG_MULTILEVEL_NO_SHARED)
+/*yaml
+  Name: nttunpack_avx2_asm
+  Description: x86_64 AVX2 NTT unpack from custom to bitreversed order
+  Signature: void mlk_nttunpack_avx2_asm(int16_t *r)
+  ABI:
+    Architecture: x86_64
+    CallingConvention: SysV
+    Features: [AVX2]
+    rdi:
+      type: buffer
+      size_bytes: 512
+      permissions: read/write
+      c_parameter: int16_t *r
+      description: Input/output polynomial (256 x int16_t)
+*/
+
 
 /*
  * WARNING: This file is auto-derived from the mlkem-native source file
- *   dev/x86_64/src/nttunpack_avx2_asm.S using scripts/simpasm. Do not modify it directly.
+ *   dev/x86_64/src/mlkem_nttunpack_avx2_asm.S using scripts/simpasm. Do not modify it directly.
  */
 
 .text