pq_crypto 0.6.4 → 0.6.5

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/{rej_uniform_aarch64_asm.S → mlkem_rej_uniform_aarch64_asm.S}

@@ -8,6 +8,9 @@
   Description: Run rejection sampling on uniform random bytes to generate uniform random integers mod q
   Signature: uint64_t mlk_rej_uniform_aarch64_asm(int16_t r[256], const uint8_t *buf, unsigned buflen, const uint8_t table[4096])
   ABI:
+    Architecture: aarch64
+    CallingConvention: AAPCS64
+    Features: [NEON]
     x0:
       type: buffer
       size_bytes: 512
@@ -42,7 +45,7 @@
 
 /*
  * WARNING: This file is auto-derived from the mlkem-native source file
- *   dev/aarch64_opt/src/rej_uniform_aarch64_asm.S using scripts/simpasm. Do not modify it directly.
+ *   dev/aarch64_opt/src/mlkem_rej_uniform_aarch64_asm.S using scripts/simpasm. Do not modify it directly.
  */
 
 .text
@@ -70,23 +73,23 @@ MLK_ASM_FN_SYMBOL(rej_uniform_aarch64_asm)
         mov x11, #0x0               // =0
         eor v16.16b, v16.16b, v16.16b
 
-Lrej_uniform_initial_zero:
+Lmlk_rej_uniform_initial_zero:
         str q16, [x7], #0x40
         stur q16, [x7, #-0x30]
         stur q16, [x7, #-0x20]
         stur q16, [x7, #-0x10]
         add x11, x11, #0x20
         cmp x11, #0x100
-        b.lt Lrej_uniform_initial_zero
+        b.lt Lmlk_rej_uniform_initial_zero
         mov x7, x8
         mov x9, #0x0                // =0
         mov x4, #0x100              // =256
         cmp x2, #0x30
-        b.lo Lrej_uniform_loop48_end
+        b.lo Lmlk_rej_uniform_loop48_end
 
-Lrej_uniform_loop48:
+Lmlk_rej_uniform_loop48:
         cmp x9, x4
-        b.hs Lrej_uniform_memory_copy
+        b.hs Lmlk_rej_uniform_memory_copy
         sub x2, x2, #0x30
         ld3 { v0.16b, v1.16b, v2.16b }, [x1], #48
         zip1 v4.16b, v0.16b, v1.16b
@@ -150,14 +153,13 @@ Lrej_uniform_loop48:
         add x9, x9, x12
         add x9, x9, x14
         cmp x2, #0x30
-        b.hs Lrej_uniform_loop48
+        b.hs Lmlk_rej_uniform_loop48
 
-Lrej_uniform_loop48_end:
+Lmlk_rej_uniform_loop48_end:
         cmp x9, x4
-        b.hs Lrej_uniform_memory_copy
+        b.hs Lmlk_rej_uniform_memory_copy
         cmp x2, #0x18
-        b.lo Lrej_uniform_memory_copy
-        sub x2, x2, #0x18
+        b.lo Lmlk_rej_uniform_memory_copy
         ld3 { v0.8b, v1.8b, v2.8b }, [x1], #24
         zip1 v4.16b, v0.16b, v1.16b
         zip1 v5.16b, v1.16b, v2.16b
@@ -186,17 +188,16 @@ Lrej_uniform_loop48_end:
         st1 { v16.8h }, [x7]
         add x7, x7, x12, lsl #1
         st1 { v17.8h }, [x7]
-        add x7, x7, x13, lsl #1
         add x9, x9, x12
         add x9, x9, x13
 
-Lrej_uniform_memory_copy:
+Lmlk_rej_uniform_memory_copy:
         cmp x9, x4
         csel x9, x9, x4, lo
         mov x11, #0x0               // =0
         mov x7, x8
 
-Lrej_uniform_final_copy:
+Lmlk_rej_uniform_final_copy:
         ldr q16, [x7], #0x40
         ldur q17, [x7, #-0x30]
         ldur q18, [x7, #-0x20]
@@ -207,11 +208,10 @@ Lrej_uniform_final_copy:
         stur q19, [x0, #-0x10]
         add x11, x11, #0x20
         cmp x11, #0x100
-        b.lt Lrej_uniform_final_copy
+        b.lt Lmlk_rej_uniform_final_copy
         mov x0, x9
-        b Lrej_uniform_return
 
-Lrej_uniform_return:
+Lmlk_rej_uniform_return:
         add sp, sp, #0x240
         .cfi_adjust_cfa_offset -0x240
         ret

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/api.h

@@ -144,7 +144,8 @@ __contract__(
   ensures(array_bound(p, 0, MLKEM_N, 0, MLKEM_Q)));
 #endif /* MLK_USE_NATIVE_NTT_CUSTOM_ORDER */
 
-#if defined(MLK_USE_NATIVE_INTT)
+#if defined(MLK_USE_NATIVE_INTT) && \
+    (!defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API))
 /**
  * Compute the inverse negacyclic number-theoretic transform (NTT) of a
  * polynomial in place.
@@ -168,7 +169,8 @@ __contract__(
   ensures((return_value == MLK_NATIVE_FUNC_SUCCESS) ==> array_abs_bound(p, 0, MLKEM_N, MLK_INVNTT_BOUND))
   ensures((return_value == MLK_NATIVE_FUNC_FALLBACK) ==> array_unchanged(p, MLKEM_N))
 );
-#endif /* MLK_USE_NATIVE_INTT */
+#endif /* MLK_USE_NATIVE_INTT && (!MLK_CONFIG_NO_ENCAPS_API || \
+          !MLK_CONFIG_NO_DECAPS_API) */
 
 #if defined(MLK_USE_NATIVE_POLY_REDUCE)
 /**
@@ -191,7 +193,7 @@ __contract__(
 );
 #endif /* MLK_USE_NATIVE_POLY_REDUCE */
 
-#if defined(MLK_USE_NATIVE_POLY_TOMONT)
+#if defined(MLK_USE_NATIVE_POLY_TOMONT) && !defined(MLK_CONFIG_NO_KEYPAIR_API)
 /**
  * In-place conversion of all coefficients of a polynomial from the normal
  * domain to the Montgomery domain.
@@ -210,7 +212,7 @@ __contract__(
   ensures((return_value == MLK_NATIVE_FUNC_SUCCESS) ==> array_abs_bound(p, 0, MLKEM_N, MLKEM_Q))
   ensures((return_value == MLK_NATIVE_FUNC_FALLBACK) ==> array_unchanged(p, MLKEM_N))
 );
-#endif /* MLK_USE_NATIVE_POLY_TOMONT */
+#endif /* MLK_USE_NATIVE_POLY_TOMONT && !MLK_CONFIG_NO_KEYPAIR_API */
 
 #if defined(MLK_USE_NATIVE_POLY_MULCACHE_COMPUTE)
 /**
@@ -340,7 +342,9 @@ __contract__(
 #endif /* MLK_CONFIG_MULTILEVEL_WITH_SHARED || MLKEM_K == 4 */
 #endif /* MLK_USE_NATIVE_POLYVEC_BASEMUL_ACC_MONTGOMERY_CACHED */
 
-#if defined(MLK_USE_NATIVE_POLY_TOBYTES)
+#if defined(MLK_USE_NATIVE_POLY_TOBYTES) && \
+    (!defined(MLK_CONFIG_NO_KEYPAIR_API) || \
+     !defined(MLK_CONFIG_NO_ENCAPS_API))
 /**
  * Serialization of a polynomial with unsigned canonical coefficients.
  *
@@ -362,9 +366,11 @@ __contract__(
   assigns(memory_slice(r, MLKEM_POLYBYTES))
   ensures(return_value == MLK_NATIVE_FUNC_SUCCESS || return_value == MLK_NATIVE_FUNC_FALLBACK)
 );
-#endif /* MLK_USE_NATIVE_POLY_TOBYTES */
+#endif /* MLK_USE_NATIVE_POLY_TOBYTES && (!MLK_CONFIG_NO_KEYPAIR_API || \
+          !MLK_CONFIG_NO_ENCAPS_API) */
 
-#if defined(MLK_USE_NATIVE_POLY_FROMBYTES)
+#if defined(MLK_USE_NATIVE_POLY_FROMBYTES) && \
+    (!defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API))
 /**
  * Deserialization of a polynomial.
  *
@@ -386,7 +392,8 @@ __contract__(
   ensures(return_value == MLK_NATIVE_FUNC_SUCCESS || return_value == MLK_NATIVE_FUNC_FALLBACK)
   ensures((return_value == MLK_NATIVE_FUNC_SUCCESS) ==> array_bound(a, 0, MLKEM_N, 0, MLKEM_UINT12_LIMIT))
 );
-#endif /* MLK_USE_NATIVE_POLY_FROMBYTES */
+#endif /* MLK_USE_NATIVE_POLY_FROMBYTES && (!MLK_CONFIG_NO_ENCAPS_API || \
+          !MLK_CONFIG_NO_DECAPS_API) */
 
 #if defined(MLK_USE_NATIVE_REJ_UNIFORM)
 /**
@@ -419,6 +426,7 @@ __contract__(
 );
 #endif /* MLK_USE_NATIVE_REJ_UNIFORM */
 
+#if !defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API)
 #if defined(MLK_CONFIG_MULTILEVEL_WITH_SHARED) || (MLKEM_K == 2 || MLKEM_K == 3)
 #if defined(MLK_USE_NATIVE_POLY_COMPRESS_D4)
 /**
@@ -470,6 +478,7 @@ __contract__(
   ensures(return_value == MLK_NATIVE_FUNC_SUCCESS || return_value == MLK_NATIVE_FUNC_FALLBACK));
 #endif /* MLK_USE_NATIVE_POLY_COMPRESS_D10 */
 
+#if !defined(MLK_CONFIG_NO_DECAPS_API)
 #if defined(MLK_USE_NATIVE_POLY_DECOMPRESS_D4)
 /**
  * De-serialization and subsequent decompression (4 bits) of a polynomial;
@@ -525,6 +534,7 @@ __contract__(
   ensures(return_value == MLK_NATIVE_FUNC_SUCCESS || return_value == MLK_NATIVE_FUNC_FALLBACK)
   ensures((return_value == MLK_NATIVE_FUNC_SUCCESS) ==> array_bound(r, 0, MLKEM_N, 0, MLKEM_Q)));
 #endif /* MLK_USE_NATIVE_POLY_DECOMPRESS_D10 */
+#endif /* !MLK_CONFIG_NO_DECAPS_API */
 #endif /* MLK_CONFIG_MULTILEVEL_WITH_SHARED || MLKEM_K == 2 || MLKEM_K == 3 */
 
 #if defined(MLK_CONFIG_MULTILEVEL_WITH_SHARED) || MLKEM_K == 4
@@ -578,6 +588,7 @@ __contract__(
   ensures(return_value == MLK_NATIVE_FUNC_SUCCESS || return_value == MLK_NATIVE_FUNC_FALLBACK));
 #endif /* MLK_USE_NATIVE_POLY_COMPRESS_D11 */
 
+#if !defined(MLK_CONFIG_NO_DECAPS_API)
 #if defined(MLK_USE_NATIVE_POLY_DECOMPRESS_D5)
 /**
  * De-serialization and subsequent decompression (5 bits) of a polynomial;
@@ -633,6 +644,8 @@ __contract__(
   ensures(return_value == MLK_NATIVE_FUNC_SUCCESS || return_value == MLK_NATIVE_FUNC_FALLBACK)
   ensures((return_value == MLK_NATIVE_FUNC_SUCCESS) ==> array_bound(r, 0, MLKEM_N, 0, MLKEM_Q)));
 #endif /* MLK_USE_NATIVE_POLY_DECOMPRESS_D11 */
+#endif /* !MLK_CONFIG_NO_DECAPS_API */
 #endif /* MLK_CONFIG_MULTILEVEL_WITH_SHARED || MLKEM_K == 4 */
+#endif /* !MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API */
 
 #endif /* !MLK_NATIVE_API_H */

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/meta.h

@@ -10,7 +10,7 @@
  */
 #include "../sys.h"
 
-#ifdef MLK_SYS_AARCH64
+#ifdef MLK_SYS_AARCH64_NEON
 #include "aarch64/meta.h"
 #endif
 

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/ppc64le/meta.h

@@ -37,6 +37,7 @@ static MLK_INLINE int mlk_ntt_native(int16_t data[MLKEM_N])
 #endif
 }
 
+#if !defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API)
 MLK_MUST_CHECK_RETURN_VALUE
 static MLK_INLINE int mlk_intt_native(int16_t data[MLKEM_N])
 {
@@ -48,6 +49,7 @@ static MLK_INLINE int mlk_intt_native(int16_t data[MLKEM_N])
   return MLK_NATIVE_FUNC_FALLBACK;
 #endif
 }
+#endif /* !MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API */
 
 MLK_MUST_CHECK_RETURN_VALUE
 static MLK_INLINE int mlk_poly_reduce_native(int16_t data[MLKEM_N])
@@ -61,6 +63,7 @@ static MLK_INLINE int mlk_poly_reduce_native(int16_t data[MLKEM_N])
 #endif
 }
 
+#if !defined(MLK_CONFIG_NO_KEYPAIR_API)
 MLK_MUST_CHECK_RETURN_VALUE
 static MLK_INLINE int mlk_poly_tomont_native(int16_t data[MLKEM_N])
 {
@@ -72,6 +75,7 @@ static MLK_INLINE int mlk_poly_tomont_native(int16_t data[MLKEM_N])
   return MLK_NATIVE_FUNC_FALLBACK;
 #endif
 }
+#endif /* !MLK_CONFIG_NO_KEYPAIR_API */
 #endif /* !__ASSEMBLER__ */
 
 #endif /* !MLK_NATIVE_PPC64LE_META_H */

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/ppc64le/src/{intt_ppc_asm.S → mlkem_intt_ppc_asm.S}

@@ -8,11 +8,34 @@
 
 #include "../../../common.h"
 #if defined(MLK_ARITH_BACKEND_PPC64LE_DEFAULT) && \
-    !defined(MLK_CONFIG_MULTILEVEL_NO_SHARED) && defined(__POWER8_VECTOR__)
+    !defined(MLK_CONFIG_MULTILEVEL_NO_SHARED) && defined(__POWER8_VECTOR__) && \
+    (!defined(MLK_CONFIG_NO_ENCAPS_API) || \
+     !defined(MLK_CONFIG_NO_DECAPS_API))
+/*yaml
+  Name: intt_ppc_asm
+  Description: PowerPC64 VSX inverse NTT
+  Signature: void mlk_intt_ppc_asm(int16_t *r, const int16_t *qdata)
+  ABI:
+    Architecture: powerpc64le
+    CallingConvention: ELFv2
+    Features: [VSX]
+    r3:
+      type: buffer
+      size_bytes: 512
+      permissions: read/write
+      c_parameter: int16_t *r
+      description: Input/output polynomial (256 x int16_t)
+    r4:
+      type: buffer
+      size_bytes: 4144
+      permissions: read-only
+      c_parameter: const int16_t *qdata
+      description: Precomputed constants (2072 x int16_t)
+*/
 
 /*
  * WARNING: This file is auto-derived from the mlkem-native source file
- *   dev/ppc64le/src/intt_ppc_asm.S using scripts/simpasm. Do not modify it directly.
+ *   dev/ppc64le/src/mlkem_intt_ppc_asm.S using scripts/simpasm. Do not modify it directly.
  */
 
 .text
@@ -84,7 +107,7 @@ MLK_ASM_FN_SYMBOL(intt_ppc_asm)
         mtctr 8
         xxlor 37, 0, 0
 
-intt_ppc_asm_Loopf:
+mlk_intt_ppc_asm_Loopf:
         lxvd2x 57, 0, 3
         lxvd2x 58, 10, 3
         lxvd2x 62, 11, 3
@@ -129,7 +152,7 @@ intt_ppc_asm_Loopf:
         stxvd2x 55, 17, 3
         stxvd2x 60, 18, 3
         addi 3, 3, 128
-        bdnz intt_ppc_asm_Loopf
+        bdnz mlk_intt_ppc_asm_Loopf
         addi 3, 3, -512
         nop
         nop
@@ -3215,7 +3238,8 @@ intt_ppc_asm_Loopf:
 MLK_ASM_FN_SIZE(intt_ppc_asm)
 
 #endif /* MLK_ARITH_BACKEND_PPC64LE_DEFAULT && !MLK_CONFIG_MULTILEVEL_NO_SHARED \
-          && __POWER8_VECTOR__ */
+          && __POWER8_VECTOR__ && (!MLK_CONFIG_NO_ENCAPS_API || \
+          !MLK_CONFIG_NO_DECAPS_API) */
 
 #if defined(__ELF__)
 .section .note.GNU-stack,"",%progbits

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/ppc64le/src/{ntt_ppc_asm.S → mlkem_ntt_ppc_asm.S}

@@ -9,10 +9,31 @@
 #include "../../../common.h"
 #if defined(MLK_ARITH_BACKEND_PPC64LE_DEFAULT) && \
     !defined(MLK_CONFIG_MULTILEVEL_NO_SHARED) && defined(__POWER8_VECTOR__)
+/*yaml
+  Name: ntt_ppc_asm
+  Description: PowerPC64 VSX forward NTT
+  Signature: void mlk_ntt_ppc_asm(int16_t *r, const int16_t *qdata)
+  ABI:
+    Architecture: powerpc64le
+    CallingConvention: ELFv2
+    Features: [VSX]
+    r3:
+      type: buffer
+      size_bytes: 512
+      permissions: read/write
+      c_parameter: int16_t *r
+      description: Input/output polynomial (256 x int16_t)
+    r4:
+      type: buffer
+      size_bytes: 4144
+      permissions: read-only
+      c_parameter: const int16_t *qdata
+      description: Precomputed constants (2072 x int16_t)
+*/
 
 /*
  * WARNING: This file is auto-derived from the mlkem-native source file
- *   dev/ppc64le/src/ntt_ppc_asm.S using scripts/simpasm. Do not modify it directly.
+ *   dev/ppc64le/src/mlkem_ntt_ppc_asm.S using scripts/simpasm. Do not modify it directly.
  */
 
 .text

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/ppc64le/src/{poly_tomont_ppc_asm.S → mlkem_poly_tomont_ppc_asm.S}

@@ -15,11 +15,33 @@
 
 #include "../../../common.h"
 #if defined(MLK_ARITH_BACKEND_PPC64LE_DEFAULT) && \
-    !defined(MLK_CONFIG_MULTILEVEL_NO_SHARED) && defined(__POWER8_VECTOR__)
+    !defined(MLK_CONFIG_MULTILEVEL_NO_SHARED) && defined(__POWER8_VECTOR__) && \
+    !defined(MLK_CONFIG_NO_KEYPAIR_API)
+/*yaml
+  Name: poly_tomont_ppc_asm
+  Description: PowerPC64 VSX conversion to Montgomery form
+  Signature: void mlk_poly_tomont_ppc_asm(int16_t *r, const int16_t *qdata)
+  ABI:
+    Architecture: powerpc64le
+    CallingConvention: ELFv2
+    Features: [VSX]
+    r3:
+      type: buffer
+      size_bytes: 512
+      permissions: read/write
+      c_parameter: int16_t *r
+      description: Input/output polynomial (256 x int16_t)
+    r4:
+      type: buffer
+      size_bytes: 4144
+      permissions: read-only
+      c_parameter: const int16_t *qdata
+      description: Precomputed constants (2072 x int16_t)
+*/
 
 /*
  * WARNING: This file is auto-derived from the mlkem-native source file
- *   dev/ppc64le/src/poly_tomont_ppc_asm.S using scripts/simpasm. Do not modify it directly.
+ *   dev/ppc64le/src/mlkem_poly_tomont_ppc_asm.S using scripts/simpasm. Do not modify it directly.
  */
 
 .text
@@ -287,7 +309,7 @@ MLK_ASM_FN_SYMBOL(poly_tomont_ppc_asm)
 MLK_ASM_FN_SIZE(poly_tomont_ppc_asm)
 
 #endif /* MLK_ARITH_BACKEND_PPC64LE_DEFAULT && !MLK_CONFIG_MULTILEVEL_NO_SHARED \
-          && __POWER8_VECTOR__ */
+          && __POWER8_VECTOR__ && !MLK_CONFIG_NO_KEYPAIR_API */
 
 #if defined(__ELF__)
 .section .note.GNU-stack,"",%progbits

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/ppc64le/src/{reduce_ppc_asm.S → mlkem_reduce_ppc_asm.S}

@@ -8,10 +8,31 @@
 #include "../../../common.h"
 #if defined(MLK_ARITH_BACKEND_PPC64LE_DEFAULT) && \
     !defined(MLK_CONFIG_MULTILEVEL_NO_SHARED) && defined(__POWER8_VECTOR__)
+/*yaml
+  Name: reduce_ppc_asm
+  Description: PowerPC64 VSX modular reduction
+  Signature: void mlk_reduce_ppc_asm(int16_t *r, const int16_t *qdata)
+  ABI:
+    Architecture: powerpc64le
+    CallingConvention: ELFv2
+    Features: [VSX]
+    r3:
+      type: buffer
+      size_bytes: 512
+      permissions: read/write
+      c_parameter: int16_t *r
+      description: Input/output polynomial (256 x int16_t)
+    r4:
+      type: buffer
+      size_bytes: 4144
+      permissions: read-only
+      c_parameter: const int16_t *qdata
+      description: Precomputed constants (2072 x int16_t)
+*/
 
 /*
  * WARNING: This file is auto-derived from the mlkem-native source file
- *   dev/ppc64le/src/reduce_ppc_asm.S using scripts/simpasm. Do not modify it directly.
+ *   dev/ppc64le/src/mlkem_reduce_ppc_asm.S using scripts/simpasm. Do not modify it directly.
  */
 
 .text

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/riscv64/meta.h

@@ -40,6 +40,7 @@ static MLK_INLINE int mlk_ntt_native(int16_t data[MLKEM_N])
   return MLK_NATIVE_FUNC_SUCCESS;
 }
 
+#if !defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API)
 MLK_MUST_CHECK_RETURN_VALUE
 static MLK_INLINE int mlk_intt_native(int16_t data[MLKEM_N])
 {
@@ -52,13 +53,16 @@ static MLK_INLINE int mlk_intt_native(int16_t data[MLKEM_N])
   mlk_rv64v_poly_invntt_tomont(data);
   return MLK_NATIVE_FUNC_SUCCESS;
 }
+#endif /* !MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API */
 
+#if !defined(MLK_CONFIG_NO_KEYPAIR_API)
 MLK_MUST_CHECK_RETURN_VALUE
 static MLK_INLINE int mlk_poly_tomont_native(int16_t data[MLKEM_N])
 {
   mlk_rv64v_poly_tomont(data);
   return MLK_NATIVE_FUNC_SUCCESS;
 }
+#endif /* !MLK_CONFIG_NO_KEYPAIR_API */
 
 MLK_MUST_CHECK_RETURN_VALUE
 static MLK_INLINE int mlk_rej_uniform_native(int16_t *r, unsigned len,

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/riscv64/src/arith_native_riscv64.h

@@ -10,8 +10,10 @@
 #define mlk_rv64v_poly_ntt MLK_NAMESPACE(ntt_riscv64)
 void mlk_rv64v_poly_ntt(int16_t *);
 
+#if !defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API)
 #define mlk_rv64v_poly_invntt_tomont MLK_NAMESPACE(intt_riscv64)
 void mlk_rv64v_poly_invntt_tomont(int16_t *r);
+#endif
 
 #define mlk_rv64v_poly_basemul_mont_add_k2 MLK_NAMESPACE(basemul_add_k2_riscv64)
 void mlk_rv64v_poly_basemul_mont_add_k2(int16_t *r, const int16_t *a,
@@ -25,8 +27,10 @@ void mlk_rv64v_poly_basemul_mont_add_k3(int16_t *r, const int16_t *a,
 void mlk_rv64v_poly_basemul_mont_add_k4(int16_t *r, const int16_t *a,
                                         const int16_t *b);
 
+#if !defined(MLK_CONFIG_NO_KEYPAIR_API)
 #define mlk_rv64v_poly_tomont MLK_NAMESPACE(tomont_riscv64)
 void mlk_rv64v_poly_tomont(int16_t *r);
+#endif
 
 #define mlk_rv64v_poly_reduce MLK_NAMESPACE(reduce_riscv64)
 void mlk_rv64v_poly_reduce(int16_t *r);

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/riscv64/src/rv64v_poly.c

@@ -78,8 +78,8 @@ static MLK_INLINE vint16m1_t fq_barrett(vint16m1_t a, size_t vl)
  * masked ops, and Zvkt's DIEL guarantee does not cover the v0 mask
  * register. Using an arithmetic-shift sign mask keeps all operands in the
  * Zvkt-covered set and matches the idiom used in the portable C
- * (mlk_ct_cmask_neg_i16, verify.h) and AArch64 (poly_reduce_aarch64_asm.S)
- * implementations. */
+ * (mlk_ct_cmask_neg_i16, verify.h) and AArch64
+ * (mlkem_poly_reduce_aarch64_asm.S) implementations. */
 
 static MLK_INLINE vint16m1_t fq_cadd(vint16m1_t rx, size_t vl)
 {
@@ -324,6 +324,7 @@ void mlk_rv64v_poly_ntt(int16_t *r)
       &r[0xe0], mlk_rv64v_ntt2(__riscv_vcreate_v_i16m1_i16m2(ve, vf), ze), vl2);
 }
 
+#if !defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API)
 /* Reverse / Gentleman-Sande butterfly operation */
 
 #define MLK_RVV_GS_BFLY_RX(u0, u1, ut, uc, vl) \
@@ -604,6 +605,7 @@ void mlk_rv64v_poly_invntt_tomont(int16_t *r)
   __riscv_vse16_v_i16m1(&r[0xe0], ve, vl);
   __riscv_vse16_v_i16m1(&r[0xf0], vf, vl);
 }
+#endif /* !MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API */
 
 /* ML-KEM's middle field GF(3329)[X]/(X^2) multiplication */
 
@@ -682,6 +684,7 @@ void mlk_rv64v_poly_basemul_mont_add_k4(int16_t *r, const int16_t *a,
 }
 #endif /* MLK_CONFIG_MULTILEVEL_WITH_SHARED || MLKEM_K == 4 */
 
+#if !defined(MLK_CONFIG_NO_KEYPAIR_API)
 /**
  * In-place conversion of all coefficients of a polynomial from the normal
  * domain to the Montgomery domain.
@@ -700,6 +703,7 @@ void mlk_rv64v_poly_tomont(int16_t *r)
     __riscv_vse16_v_i16m1(&r[i], vec, vl);
   }
 }
+#endif /* !MLK_CONFIG_NO_KEYPAIR_API */
 
 /**
  * Apply Barrett reduction to all coefficients of a polynomial. For details

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/meta.h

@@ -68,6 +68,7 @@ static MLK_INLINE int mlk_ntt_native(int16_t data[MLKEM_N])
   return MLK_NATIVE_FUNC_SUCCESS;
 }
 
+#if !defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API)
 MLK_MUST_CHECK_RETURN_VALUE
 static MLK_INLINE int mlk_intt_native(int16_t data[MLKEM_N])
 {
@@ -79,6 +80,7 @@ static MLK_INLINE int mlk_intt_native(int16_t data[MLKEM_N])
   mlk_invntt_avx2_asm(data, mlk_qdata);
   return MLK_NATIVE_FUNC_SUCCESS;
 }
+#endif /* !MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API */
 
 MLK_MUST_CHECK_RETURN_VALUE
 static MLK_INLINE int mlk_poly_reduce_native(int16_t data[MLKEM_N])
@@ -92,6 +94,7 @@ static MLK_INLINE int mlk_poly_reduce_native(int16_t data[MLKEM_N])
   return MLK_NATIVE_FUNC_SUCCESS;
 }
 
+#if !defined(MLK_CONFIG_NO_KEYPAIR_API)
 MLK_MUST_CHECK_RETURN_VALUE
 static MLK_INLINE int mlk_poly_tomont_native(int16_t data[MLKEM_N])
 {
@@ -103,6 +106,7 @@ static MLK_INLINE int mlk_poly_tomont_native(int16_t data[MLKEM_N])
   mlk_tomont_avx2_asm(data);
   return MLK_NATIVE_FUNC_SUCCESS;
 }
+#endif /* !MLK_CONFIG_NO_KEYPAIR_API */
 
 MLK_MUST_CHECK_RETURN_VALUE
 static MLK_INLINE int mlk_poly_mulcache_compute_native(int16_t x[MLKEM_N / 2],
@@ -165,6 +169,7 @@ static MLK_INLINE int mlk_polyvec_basemul_acc_montgomery_cached_k4_native(
 }
 #endif /* MLK_CONFIG_MULTILEVEL_WITH_SHARED || MLKEM_K == 4 */
 
+#if !defined(MLK_CONFIG_NO_KEYPAIR_API) || !defined(MLK_CONFIG_NO_ENCAPS_API)
 MLK_MUST_CHECK_RETURN_VALUE
 static MLK_INLINE int mlk_poly_tobytes_native(uint8_t r[MLKEM_POLYBYTES],
                                               const int16_t a[MLKEM_N])
@@ -177,7 +182,9 @@ static MLK_INLINE int mlk_poly_tobytes_native(uint8_t r[MLKEM_POLYBYTES],
   mlk_ntttobytes_avx2_asm(r, a);
   return MLK_NATIVE_FUNC_SUCCESS;
 }
+#endif /* !MLK_CONFIG_NO_KEYPAIR_API || !MLK_CONFIG_NO_ENCAPS_API */
 
+#if !defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API)
 MLK_MUST_CHECK_RETURN_VALUE
 static MLK_INLINE int mlk_poly_frombytes_native(
     int16_t r[MLKEM_N], const uint8_t a[MLKEM_POLYBYTES])
@@ -190,8 +197,12 @@ static MLK_INLINE int mlk_poly_frombytes_native(
   mlk_nttfrombytes_avx2_asm(r, a);
   return MLK_NATIVE_FUNC_SUCCESS;
 }
+#endif /* !MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API */
 
-#if defined(MLK_CONFIG_MULTILEVEL_WITH_SHARED) || (MLKEM_K == 2 || MLKEM_K == 3)
+#if (!defined(MLK_CONFIG_NO_ENCAPS_API) ||                         \
+     !defined(MLK_CONFIG_NO_DECAPS_API)) &&                        \
+    (defined(MLK_CONFIG_MULTILEVEL_WITH_SHARED) || MLKEM_K == 2 || \
+     MLKEM_K == 3)
 MLK_MUST_CHECK_RETURN_VALUE
 static MLK_INLINE int mlk_poly_compress_d4_native(
     uint8_t r[MLKEM_POLYCOMPRESSEDBYTES_D4], const int16_t a[MLKEM_N])
@@ -218,6 +229,7 @@ static MLK_INLINE int mlk_poly_compress_d10_native(
   return MLK_NATIVE_FUNC_SUCCESS;
 }
 
+#if !defined(MLK_CONFIG_NO_DECAPS_API)
 MLK_MUST_CHECK_RETURN_VALUE
 static MLK_INLINE int mlk_poly_decompress_d4_native(
     int16_t r[MLKEM_N], const uint8_t a[MLKEM_POLYCOMPRESSEDBYTES_D4])
@@ -243,9 +255,14 @@ static MLK_INLINE int mlk_poly_decompress_d10_native(
   mlk_poly_decompress_d10_avx2_asm(r, a, mlk_decompress_d10_data);
   return MLK_NATIVE_FUNC_SUCCESS;
 }
-#endif /* MLK_CONFIG_MULTILEVEL_WITH_SHARED || MLKEM_K == 2 || MLKEM_K == 3 */
-
-#if defined(MLK_CONFIG_MULTILEVEL_WITH_SHARED) || MLKEM_K == 4
+#endif /* !MLK_CONFIG_NO_DECAPS_API */
+#endif /* (!MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API) &&         \
+          (MLK_CONFIG_MULTILEVEL_WITH_SHARED || MLKEM_K == 2 || MLKEM_K == 3) \
+        */
+
+#if (!defined(MLK_CONFIG_NO_ENCAPS_API) ||  \
+     !defined(MLK_CONFIG_NO_DECAPS_API)) && \
+    (defined(MLK_CONFIG_MULTILEVEL_WITH_SHARED) || MLKEM_K == 4)
 MLK_MUST_CHECK_RETURN_VALUE
 static MLK_INLINE int mlk_poly_compress_d5_native(
     uint8_t r[MLKEM_POLYCOMPRESSEDBYTES_D5], const int16_t a[MLKEM_N])
@@ -272,6 +289,7 @@ static MLK_INLINE int mlk_poly_compress_d11_native(
   return MLK_NATIVE_FUNC_SUCCESS;
 }
 
+#if !defined(MLK_CONFIG_NO_DECAPS_API)
 MLK_MUST_CHECK_RETURN_VALUE
 static MLK_INLINE int mlk_poly_decompress_d5_native(
     int16_t r[MLKEM_N], const uint8_t a[MLKEM_POLYCOMPRESSEDBYTES_D5])
@@ -297,7 +315,9 @@ static MLK_INLINE int mlk_poly_decompress_d11_native(
   mlk_poly_decompress_d11_avx2_asm(r, a, mlk_decompress_d11_data);
   return MLK_NATIVE_FUNC_SUCCESS;
 }
-#endif /* MLK_CONFIG_MULTILEVEL_WITH_SHARED || MLKEM_K == 4 */
+#endif /* !MLK_CONFIG_NO_DECAPS_API */
+#endif /* (!MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API) && \
+          (MLK_CONFIG_MULTILEVEL_WITH_SHARED || MLKEM_K == 4) */
 
 #endif /* !__ASSEMBLER__ */