pq_crypto 0.6.4 → 0.6.5

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/arith_native_x86_64.h

@@ -22,7 +22,7 @@ MLK_MUST_CHECK_RETURN_VALUE MLK_SYSV_ABI
 uint64_t mlk_rej_uniform_avx2_asm(int16_t *r, const uint8_t *buf,
                                   unsigned buflen, const uint8_t *table)
 /* This must be kept in sync with the HOL-Light specification
- * in proofs/hol_light/x86_64/proofs/rej_uniform_avx2_asm.ml. */
+ * in proofs/hol_light/x86_64/proofs/mlkem_rej_uniform_avx2_asm.ml. */
 __contract__(
     requires(buflen % 12 == 0)
     requires(memory_no_alias(buf, buflen))
@@ -37,7 +37,7 @@ __contract__(
 MLK_SYSV_ABI
 void mlk_ntt_avx2_asm(int16_t *r, const int16_t *qdata)
 /* This must be kept in sync with the HOL-Light specification
- * in proofs/hol_light/x86_64/proofs/ntt_avx2_asm.ml */
+ * in proofs/hol_light/x86_64/proofs/mlkem_ntt_avx2_asm.ml */
 __contract__(
   requires(memory_no_alias(r, sizeof(int16_t) * MLKEM_N))
   requires(array_abs_bound(r, 0, MLKEM_N, 8192))
@@ -52,7 +52,7 @@ __contract__(
 MLK_SYSV_ABI
 void mlk_invntt_avx2_asm(int16_t *r, const int16_t *qdata)
 /* This must be kept in sync with the HOL-Light specification
- * in proofs/hol_light/x86_64/proofs/intt_avx2_asm.ml */
+ * in proofs/hol_light/x86_64/proofs/mlkem_intt_avx2_asm.ml */
 __contract__(
   requires(memory_no_alias(r, sizeof(int16_t) * MLKEM_N))
   requires(qdata == mlk_qdata)
@@ -66,7 +66,7 @@ __contract__(
 MLK_SYSV_ABI
 void mlk_nttunpack_avx2_asm(int16_t *r)
 /* This must be kept in sync with the HOL-Light specification
- * in proofs/hol_light/x86_64/proofs/nttunpack_avx2_asm.ml */
+ * in proofs/hol_light/x86_64/proofs/mlkem_nttunpack_avx2_asm.ml */
 __contract__(
   requires(memory_no_alias(r, sizeof(int16_t) * MLKEM_N))
   requires(array_bound(r, 0, MLKEM_N, 0, MLKEM_Q))
@@ -81,7 +81,7 @@ __contract__(
 MLK_SYSV_ABI
 void mlk_reduce_avx2_asm(int16_t *r)
 /* This must be kept in sync with the HOL-Light specification
- * in proofs/hol_light/x86_64/proofs/reduce_avx2_asm.ml */
+ * in proofs/hol_light/x86_64/proofs/mlkem_reduce_avx2_asm.ml */
 __contract__(
   requires(memory_no_alias(r, sizeof(int16_t) * MLKEM_N))
   assigns(memory_slice(r, sizeof(int16_t) * MLKEM_N))
@@ -94,7 +94,7 @@ MLK_SYSV_ABI
 void mlk_poly_mulcache_compute_avx2_asm(int16_t *out, const int16_t *in,
                                         const int16_t *qdata)
 /* This must be kept in sync with the HOL-Light specification
- * in proofs/hol_light/x86_64/proofs/poly_mulcache_compute_avx2_asm.ml */
+ * in proofs/hol_light/x86_64/proofs/mlkem_poly_mulcache_compute_avx2_asm.ml */
 __contract__(
   requires(memory_no_alias(out, sizeof(int16_t) * (MLKEM_N / 2)))
   requires(memory_no_alias(in, sizeof(int16_t) * MLKEM_N))
@@ -109,7 +109,7 @@ MLK_SYSV_ABI
 void mlk_polyvec_basemul_acc_montgomery_cached_k2_avx2_asm(
     int16_t *r, const int16_t *a, const int16_t *b, const int16_t *b_cache)
 /* This must be kept in sync with the HOL-Light specification in
- * proofs/hol_light/x86_64/proofs/polyvec_basemul_acc_montgomery_cached_k2_avx2_asm.ml.
+ * proofs/hol_light/x86_64/proofs/mlkem_polyvec_basemul_acc_montgomery_cached_k2_avx2_asm.ml.
  */
 __contract__(
     requires(memory_no_alias(r, sizeof(int16_t) * MLKEM_N))
@@ -126,7 +126,7 @@ MLK_SYSV_ABI
 void mlk_polyvec_basemul_acc_montgomery_cached_k3_avx2_asm(
     int16_t *r, const int16_t *a, const int16_t *b, const int16_t *b_cache)
 /* This must be kept in sync with the HOL-Light specification in
- * proofs/hol_light/x86_64/proofs/polyvec_basemul_acc_montgomery_cached_k3_avx2_asm.ml.
+ * proofs/hol_light/x86_64/proofs/mlkem_polyvec_basemul_acc_montgomery_cached_k3_avx2_asm.ml.
  */
 __contract__(
     requires(memory_no_alias(r, sizeof(int16_t) * MLKEM_N))
@@ -143,7 +143,7 @@ MLK_SYSV_ABI
 void mlk_polyvec_basemul_acc_montgomery_cached_k4_avx2_asm(
     int16_t *r, const int16_t *a, const int16_t *b, const int16_t *b_cache)
 /* This must be kept in sync with the HOL-Light specification in
- * proofs/hol_light/x86_64/proofs/polyvec_basemul_acc_montgomery_cached_k4_avx2_asm.ml.
+ * proofs/hol_light/x86_64/proofs/mlkem_polyvec_basemul_acc_montgomery_cached_k4_avx2_asm.ml.
  */
 __contract__(
     requires(memory_no_alias(r, sizeof(int16_t) * MLKEM_N))
@@ -158,7 +158,7 @@ __contract__(
 MLK_SYSV_ABI
 void mlk_ntttobytes_avx2_asm(uint8_t *r, const int16_t *a)
 /* This must be kept in sync with the HOL-Light specification in
- * proofs/hol_light/x86_64/proofs/ntttobytes_avx2_asm.ml.
+ * proofs/hol_light/x86_64/proofs/mlkem_ntttobytes_avx2_asm.ml.
  */
 __contract__(
   requires(memory_no_alias(r, MLKEM_POLYBYTES))
@@ -171,7 +171,7 @@ __contract__(
 MLK_SYSV_ABI
 void mlk_nttfrombytes_avx2_asm(int16_t *r, const uint8_t *a)
 /* This must be kept in sync with the HOL-Light specification in
- * proofs/hol_light/x86_64/proofs/nttfrombytes_avx2_asm.ml.
+ * proofs/hol_light/x86_64/proofs/mlkem_nttfrombytes_avx2_asm.ml.
  */
 __contract__(
   requires(memory_no_alias(a, MLKEM_POLYBYTES))
@@ -184,7 +184,7 @@ __contract__(
 MLK_SYSV_ABI
 void mlk_tomont_avx2_asm(int16_t *r)
 /* This must be kept in sync with the HOL-Light specification in
- * proofs/hol_light/x86_64/proofs/tomont_avx2_asm.ml.
+ * proofs/hol_light/x86_64/proofs/mlkem_tomont_avx2_asm.ml.
  */
 __contract__(
   requires(memory_no_alias(r, sizeof(int16_t) * MLKEM_N))
@@ -198,7 +198,7 @@ void mlk_poly_compress_d4_avx2_asm(uint8_t r[MLKEM_POLYCOMPRESSEDBYTES_D4],
                                    const int16_t *MLK_RESTRICT a,
                                    const uint8_t *data)
 /* This must be kept in sync with the HOL-Light specification in
- * proofs/hol_light/x86_64/proofs/poly_compress_d4_avx2_asm.ml.
+ * proofs/hol_light/x86_64/proofs/mlkem_poly_compress_d4_avx2_asm.ml.
  */
 __contract__(
   requires(memory_no_alias(r, MLKEM_POLYCOMPRESSEDBYTES_D4))
@@ -215,7 +215,7 @@ void mlk_poly_decompress_d4_avx2_asm(
     int16_t *MLK_RESTRICT r, const uint8_t a[MLKEM_POLYCOMPRESSEDBYTES_D4],
     const uint8_t *data)
 /* This must be kept in sync with the HOL-Light specification in
- * proofs/hol_light/x86_64/proofs/poly_decompress_d4_avx2_asm.ml.
+ * proofs/hol_light/x86_64/proofs/mlkem_poly_decompress_d4_avx2_asm.ml.
  */
 __contract__(
   requires(memory_no_alias(r, sizeof(int16_t) * MLKEM_N))
@@ -231,7 +231,7 @@ void mlk_poly_compress_d10_avx2_asm(uint8_t r[MLKEM_POLYCOMPRESSEDBYTES_D10],
                                     const int16_t *MLK_RESTRICT a,
                                     const uint8_t *data)
 /* This must be kept in sync with the HOL-Light specification in
- * proofs/hol_light/x86_64/proofs/poly_compress_d10_avx2_asm.ml.
+ * proofs/hol_light/x86_64/proofs/mlkem_poly_compress_d10_avx2_asm.ml.
  */
 __contract__(
   requires(memory_no_alias(r, MLKEM_POLYCOMPRESSEDBYTES_D10))
@@ -248,7 +248,7 @@ void mlk_poly_decompress_d10_avx2_asm(
     int16_t *MLK_RESTRICT r, const uint8_t a[MLKEM_POLYCOMPRESSEDBYTES_D10],
     const uint8_t *data)
 /* This must be kept in sync with the HOL-Light specification in
- * proofs/hol_light/x86_64/proofs/poly_decompress_d10_avx2_asm.ml.
+ * proofs/hol_light/x86_64/proofs/mlkem_poly_decompress_d10_avx2_asm.ml.
  */
 __contract__(
   requires(memory_no_alias(r, sizeof(int16_t) * MLKEM_N))
@@ -264,7 +264,7 @@ void mlk_poly_compress_d5_avx2_asm(uint8_t r[MLKEM_POLYCOMPRESSEDBYTES_D5],
                                    const int16_t *MLK_RESTRICT a,
                                    const uint8_t *data)
 /* This must be kept in sync with the HOL-Light specification in
- * proofs/hol_light/x86_64/proofs/poly_compress_d5_avx2_asm.ml.
+ * proofs/hol_light/x86_64/proofs/mlkem_poly_compress_d5_avx2_asm.ml.
  */
 __contract__(
   requires(memory_no_alias(r, MLKEM_POLYCOMPRESSEDBYTES_D5))
@@ -281,7 +281,7 @@ void mlk_poly_decompress_d5_avx2_asm(
     int16_t *MLK_RESTRICT r, const uint8_t a[MLKEM_POLYCOMPRESSEDBYTES_D5],
     const uint8_t *data)
 /* This must be kept in sync with the HOL-Light specification in
- * proofs/hol_light/x86_64/proofs/poly_decompress_d5_avx2_asm.ml.
+ * proofs/hol_light/x86_64/proofs/mlkem_poly_decompress_d5_avx2_asm.ml.
  */
 __contract__(
   requires(memory_no_alias(r, sizeof(int16_t) * MLKEM_N))
@@ -297,7 +297,7 @@ void mlk_poly_compress_d11_avx2_asm(uint8_t r[MLKEM_POLYCOMPRESSEDBYTES_D11],
                                     const int16_t *MLK_RESTRICT a,
                                     const uint8_t *data)
 /* This must be kept in sync with the HOL-Light specification in
- * proofs/hol_light/x86_64/proofs/poly_compress_d11_avx2_asm.ml.
+ * proofs/hol_light/x86_64/proofs/mlkem_poly_compress_d11_avx2_asm.ml.
  */
 __contract__(
   requires(memory_no_alias(r, MLKEM_POLYCOMPRESSEDBYTES_D11))
@@ -314,7 +314,7 @@ void mlk_poly_decompress_d11_avx2_asm(
     int16_t *MLK_RESTRICT r, const uint8_t a[MLKEM_POLYCOMPRESSEDBYTES_D11],
     const uint8_t *data)
 /* This must be kept in sync with the HOL-Light specification in
- * proofs/hol_light/x86_64/proofs/poly_decompress_d11_avx2_asm.ml.
+ * proofs/hol_light/x86_64/proofs/mlkem_poly_decompress_d11_avx2_asm.ml.
  */
 __contract__(
   requires(memory_no_alias(r, sizeof(int16_t) * MLKEM_N))

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/compress_consts.c

@@ -11,7 +11,8 @@
 
 #include "../../../common.h"
 
-#if defined(MLK_ARITH_BACKEND_X86_64_DEFAULT)
+#if defined(MLK_ARITH_BACKEND_X86_64_DEFAULT) && \
+    (!defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API))
 
 #include "compress_consts.h"
 
@@ -25,11 +26,13 @@ MLK_ALIGN MLK_INTERNAL_DATA_DEFINITION const uint8_t
         2, 0, 0, 0, 6, 0, 0, 0, 3, 0, 0, 0, 7, 0, 0, 0, /* permdidx */
 };
 
+#if !defined(MLK_CONFIG_NO_DECAPS_API)
 MLK_ALIGN MLK_INTERNAL_DATA_DEFINITION const uint8_t
     mlk_decompress_d4_data[32] = {
         0, 0, 0, 0, 1, 1, 1, 1, 2, 2, 2, 2, 3, 3, 3, 3,
         4, 4, 4, 4, 5, 5, 5, 5, 6, 6, 6, 6, 7, 7, 7, 7, /* shufbidx */
 };
+#endif /* !MLK_CONFIG_NO_DECAPS_API */
 
 MLK_ALIGN MLK_INTERNAL_DATA_DEFINITION const uint8_t
     mlk_compress_d10_data[32] = {
@@ -38,11 +41,13 @@ MLK_ALIGN MLK_INTERNAL_DATA_DEFINITION const uint8_t
         255, 255, 255, 255, 0,   1, 2,  3,  4,  8, /* shufbidx */
 };
 
+#if !defined(MLK_CONFIG_NO_DECAPS_API)
 MLK_ALIGN MLK_INTERNAL_DATA_DEFINITION const uint8_t
     mlk_decompress_d10_data[32] = {
         0, 1, 1, 2, 2, 3, 3, 4, 5, 6, 6, 7, 7, 8,  8,  9,
         2, 3, 3, 4, 4, 5, 5, 6, 7, 8, 8, 9, 9, 10, 10, 11, /* shufbidx */
 };
+#endif /* !MLK_CONFIG_NO_DECAPS_API */
 
 #endif /* !MLK_CONFIG_MULTILEVEL_NO_SHARED &&                                 \
           (MLK_CONFIG_MULTILEVEL_WITH_SHARED || MLKEM_K == 2 || MLKEM_K == 3) \
@@ -58,6 +63,7 @@ MLK_ALIGN MLK_INTERNAL_DATA_DEFINITION const uint8_t
         1, 2,  3,  4,  255, 255, 255, 255, 255, 8, /* shufbidx */
 };
 
+#if !defined(MLK_CONFIG_NO_DECAPS_API)
 /* shufbidx[0:32], mask[32:64], shift[64:96] */
 MLK_ALIGN MLK_INTERNAL_DATA_DEFINITION const uint8_t
     mlk_decompress_d5_data[96] = {
@@ -68,6 +74,7 @@ MLK_ALIGN MLK_INTERNAL_DATA_DEFINITION const uint8_t
         0,   4, 32,  0, 0,   1,  8,   0,  64,  0, 0,   2, 16,  0, 128, 0, 0,  4,
         32,  0, 0,   1, 8,   0,  64,  0,  0,   2, 16,  0, 128, 0, /* shift */
 };
+#endif /* !MLK_CONFIG_NO_DECAPS_API */
 
 /* srlvqidx[0:32], shufbidx[32:64] */
 MLK_ALIGN MLK_INTERNAL_DATA_DEFINITION const uint8_t
@@ -81,6 +88,7 @@ MLK_ALIGN MLK_INTERNAL_DATA_DEFINITION const uint8_t
             255, 255, 255, 255, 0,   0,  1, 2, 3,  4, /* shufbidx */
 };
 
+#if !defined(MLK_CONFIG_NO_DECAPS_API)
 /* shufbidx[0:32], srlvdidx[32:64], srlvqidx[64:96], shift[96:128] */
 MLK_ALIGN MLK_INTERNAL_DATA_DEFINITION const uint8_t
     mlk_decompress_d11_data[128] = {
@@ -93,12 +101,15 @@ MLK_ALIGN MLK_INTERNAL_DATA_DEFINITION const uint8_t
         32, 0, 4, 0, 1, 0, 32, 0, 8, 0, 1, 0,  32, 0,  4,  0,
         32, 0, 4, 0, 1, 0, 32, 0, 8, 0, 1, 0,  32, 0,  4,  0, /* shift */
 };
+#endif /* !MLK_CONFIG_NO_DECAPS_API */
 
 #endif /* !MLK_CONFIG_MULTILEVEL_NO_SHARED && \
           (MLK_CONFIG_MULTILEVEL_WITH_SHARED || MLKEM_K == 4) */
 
-#else /* MLK_ARITH_BACKEND_X86_64_DEFAULT */
+#else /* MLK_ARITH_BACKEND_X86_64_DEFAULT && (!MLK_CONFIG_NO_ENCAPS_API || \
+         !MLK_CONFIG_NO_DECAPS_API) */
 
 MLK_EMPTY_CU(avx2_compress_consts)
 
-#endif /* !MLK_ARITH_BACKEND_X86_64_DEFAULT */
+#endif /* !(MLK_ARITH_BACKEND_X86_64_DEFAULT && (!MLK_CONFIG_NO_ENCAPS_API || \
+          !MLK_CONFIG_NO_DECAPS_API)) */

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/compress_consts.h

@@ -19,26 +19,34 @@
 #define mlk_compress_d4_data MLK_NAMESPACE(compress_d4_data)
 MLK_INTERNAL_DATA_DECLARATION const uint8_t mlk_compress_d4_data[32];
 
+#if !defined(MLK_CONFIG_NO_DECAPS_API)
 #define mlk_decompress_d4_data MLK_NAMESPACE(decompress_d4_data)
 MLK_INTERNAL_DATA_DECLARATION const uint8_t mlk_decompress_d4_data[32];
+#endif
 
 #define mlk_compress_d10_data MLK_NAMESPACE(compress_d10_data)
 MLK_INTERNAL_DATA_DECLARATION const uint8_t mlk_compress_d10_data[32];
 
+#if !defined(MLK_CONFIG_NO_DECAPS_API)
 #define mlk_decompress_d10_data MLK_NAMESPACE(decompress_d10_data)
 MLK_INTERNAL_DATA_DECLARATION const uint8_t mlk_decompress_d10_data[32];
+#endif
 
 #define mlk_compress_d5_data MLK_NAMESPACE(compress_d5_data)
 MLK_INTERNAL_DATA_DECLARATION const uint8_t mlk_compress_d5_data[32];
 
+#if !defined(MLK_CONFIG_NO_DECAPS_API)
 #define mlk_decompress_d5_data MLK_NAMESPACE(decompress_d5_data)
 MLK_INTERNAL_DATA_DECLARATION const uint8_t mlk_decompress_d5_data[96];
+#endif
 
 #define mlk_compress_d11_data MLK_NAMESPACE(compress_d11_data)
 MLK_INTERNAL_DATA_DECLARATION const uint8_t mlk_compress_d11_data[64];
 
+#if !defined(MLK_CONFIG_NO_DECAPS_API)
 #define mlk_decompress_d11_data MLK_NAMESPACE(decompress_d11_data)
 MLK_INTERNAL_DATA_DECLARATION const uint8_t mlk_decompress_d11_data[128];
+#endif
 
 #endif /* !__ASSEMBLER__ */
 

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/{intt_avx2_asm.S → mlkem_intt_avx2_asm.S}

@@ -30,11 +30,35 @@
 
 #include "../../../common.h"
 #if defined(MLK_ARITH_BACKEND_X86_64_DEFAULT) && \
-    !defined(MLK_CONFIG_MULTILEVEL_NO_SHARED)
+    !defined(MLK_CONFIG_MULTILEVEL_NO_SHARED) && \
+    (!defined(MLK_CONFIG_NO_ENCAPS_API) || \
+     !defined(MLK_CONFIG_NO_DECAPS_API))
+/*yaml
+  Name: invntt_avx2_asm
+  Description: x86_64 AVX2 inverse NTT
+  Signature: void mlk_invntt_avx2_asm(int16_t *r, const int16_t *qdata)
+  ABI:
+    Architecture: x86_64
+    CallingConvention: SysV
+    Features: [AVX2]
+    rdi:
+      type: buffer
+      size_bytes: 512
+      permissions: read/write
+      c_parameter: int16_t *r
+      description: Input/output polynomial (256 x int16_t)
+    rsi:
+      type: buffer
+      size_bytes: 1248
+      permissions: read-only
+      c_parameter: const int16_t *qdata
+      description: Precomputed constants (624 x int16_t)
+*/
+
 
 /*
  * WARNING: This file is auto-derived from the mlkem-native source file
- *   dev/x86_64/src/intt_avx2_asm.S using scripts/simpasm. Do not modify it directly.
+ *   dev/x86_64/src/mlkem_intt_avx2_asm.S using scripts/simpasm. Do not modify it directly.
  */
 
 .text
@@ -712,7 +736,7 @@ MLK_ASM_FN_SYMBOL(invntt_avx2_asm)
 MLK_ASM_FN_SIZE(invntt_avx2_asm)
 
 #endif /* MLK_ARITH_BACKEND_X86_64_DEFAULT && !MLK_CONFIG_MULTILEVEL_NO_SHARED \
-        */
+          && (!MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API) */
 
 #if defined(__ELF__)
 .section .note.GNU-stack,"",%progbits

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/{ntt_avx2_asm.S → mlkem_ntt_avx2_asm.S}

@@ -27,10 +27,32 @@
 #include "../../../common.h"
 #if defined(MLK_ARITH_BACKEND_X86_64_DEFAULT) && \
     !defined(MLK_CONFIG_MULTILEVEL_NO_SHARED)
+/*yaml
+  Name: ntt_avx2_asm
+  Description: x86_64 AVX2 forward NTT
+  Signature: void mlk_ntt_avx2_asm(int16_t *r, const int16_t *qdata)
+  ABI:
+    Architecture: x86_64
+    CallingConvention: SysV
+    Features: [AVX2]
+    rdi:
+      type: buffer
+      size_bytes: 512
+      permissions: read/write
+      c_parameter: int16_t *r
+      description: Input/output polynomial (256 x int16_t)
+    rsi:
+      type: buffer
+      size_bytes: 1248
+      permissions: read-only
+      c_parameter: const int16_t *qdata
+      description: Precomputed constants (624 x int16_t)
+*/
+
 
 /*
  * WARNING: This file is auto-derived from the mlkem-native source file
- *   dev/x86_64/src/ntt_avx2_asm.S using scripts/simpasm. Do not modify it directly.
+ *   dev/x86_64/src/mlkem_ntt_avx2_asm.S using scripts/simpasm. Do not modify it directly.
  */
 
 .text

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/{nttfrombytes_avx2_asm.S → mlkem_nttfrombytes_avx2_asm.S}

@@ -20,11 +20,35 @@
 #include "../../../common.h"
 
 #if defined(MLK_ARITH_BACKEND_X86_64_DEFAULT) && \
-    !defined(MLK_CONFIG_MULTILEVEL_NO_SHARED)
+    !defined(MLK_CONFIG_MULTILEVEL_NO_SHARED) && \
+    (!defined(MLK_CONFIG_NO_ENCAPS_API) || \
+     !defined(MLK_CONFIG_NO_DECAPS_API))
+/*yaml
+  Name: nttfrombytes_avx2_asm
+  Description: x86_64 AVX2 polynomial deserialization in NTT domain
+  Signature: void mlk_nttfrombytes_avx2_asm(int16_t *r, const uint8_t *a)
+  ABI:
+    Architecture: x86_64
+    CallingConvention: SysV
+    Features: [AVX2]
+    rdi:
+      type: buffer
+      size_bytes: 512
+      permissions: write-only
+      c_parameter: int16_t *r
+      description: Output polynomial (256 x int16_t)
+    rsi:
+      type: buffer
+      size_bytes: 384
+      permissions: read-only
+      c_parameter: const uint8_t *a
+      description: Input byte array (MLKEM_POLYBYTES = 384)
+*/
+
 
 /*
  * WARNING: This file is auto-derived from the mlkem-native source file
- *   dev/x86_64/src/nttfrombytes_avx2_asm.S using scripts/simpasm. Do not modify it directly.
+ *   dev/x86_64/src/mlkem_nttfrombytes_avx2_asm.S using scripts/simpasm. Do not modify it directly.
  */
 
 .text
@@ -186,7 +210,7 @@ MLK_ASM_FN_SYMBOL(nttfrombytes_avx2_asm)
 MLK_ASM_FN_SIZE(nttfrombytes_avx2_asm)
 
 #endif /* MLK_ARITH_BACKEND_X86_64_DEFAULT && !MLK_CONFIG_MULTILEVEL_NO_SHARED \
-        */
+          && (!MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API) */
 
 #if defined(__ELF__)
 .section .note.GNU-stack,"",%progbits

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/{ntttobytes_avx2_asm.S → mlkem_ntttobytes_avx2_asm.S}

@@ -20,11 +20,35 @@
 #include "../../../common.h"
 
 #if defined(MLK_ARITH_BACKEND_X86_64_DEFAULT) && \
-    !defined(MLK_CONFIG_MULTILEVEL_NO_SHARED)
+    !defined(MLK_CONFIG_MULTILEVEL_NO_SHARED) && \
+    (!defined(MLK_CONFIG_NO_KEYPAIR_API) || \
+     !defined(MLK_CONFIG_NO_ENCAPS_API))
+/*yaml
+  Name: ntttobytes_avx2_asm
+  Description: x86_64 AVX2 polynomial serialization in NTT domain
+  Signature: void mlk_ntttobytes_avx2_asm(uint8_t *r, const int16_t *a)
+  ABI:
+    Architecture: x86_64
+    CallingConvention: SysV
+    Features: [AVX2]
+    rdi:
+      type: buffer
+      size_bytes: 384
+      permissions: write-only
+      c_parameter: uint8_t *r
+      description: Output byte array (MLKEM_POLYBYTES = 384)
+    rsi:
+      type: buffer
+      size_bytes: 512
+      permissions: read-only
+      c_parameter: const int16_t *a
+      description: Input polynomial (256 x int16_t)
+*/
+
 
 /*
  * WARNING: This file is auto-derived from the mlkem-native source file
- *   dev/x86_64/src/ntttobytes_avx2_asm.S using scripts/simpasm. Do not modify it directly.
+ *   dev/x86_64/src/mlkem_ntttobytes_avx2_asm.S using scripts/simpasm. Do not modify it directly.
  */
 
 .text
@@ -174,7 +198,7 @@ MLK_ASM_FN_SYMBOL(ntttobytes_avx2_asm)
 MLK_ASM_FN_SIZE(ntttobytes_avx2_asm)
 
 #endif /* MLK_ARITH_BACKEND_X86_64_DEFAULT && !MLK_CONFIG_MULTILEVEL_NO_SHARED \
-        */
+          && (!MLK_CONFIG_NO_KEYPAIR_API || !MLK_CONFIG_NO_ENCAPS_API) */
 
 #if defined(__ELF__)
 .section .note.GNU-stack,"",%progbits

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/{nttunpack_avx2_asm.S → mlkem_nttunpack_avx2_asm.S}

@@ -21,10 +21,26 @@
 
 #if defined(MLK_ARITH_BACKEND_X86_64_DEFAULT) && \
     !defined(MLK_CONFIG_MULTILEVEL_NO_SHARED)
+/*yaml
+  Name: nttunpack_avx2_asm
+  Description: x86_64 AVX2 NTT unpack from custom to bitreversed order
+  Signature: void mlk_nttunpack_avx2_asm(int16_t *r)
+  ABI:
+    Architecture: x86_64
+    CallingConvention: SysV
+    Features: [AVX2]
+    rdi:
+      type: buffer
+      size_bytes: 512
+      permissions: read/write
+      c_parameter: int16_t *r
+      description: Input/output polynomial (256 x int16_t)
+*/
+
 
 /*
  * WARNING: This file is auto-derived from the mlkem-native source file
- *   dev/x86_64/src/nttunpack_avx2_asm.S using scripts/simpasm. Do not modify it directly.
+ *   dev/x86_64/src/mlkem_nttunpack_avx2_asm.S using scripts/simpasm. Do not modify it directly.
  */
 
 .text

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/{poly_compress_d10_avx2_asm.S → mlkem_poly_compress_d10_avx2_asm.S}

@@ -31,11 +31,41 @@
 #include "../../../common.h"
 #if defined(MLK_ARITH_BACKEND_X86_64_DEFAULT) && \
     !defined(MLK_CONFIG_MULTILEVEL_NO_SHARED) && \
+    (!defined(MLK_CONFIG_NO_ENCAPS_API) || \
+     !defined(MLK_CONFIG_NO_DECAPS_API)) && \
     (defined(MLK_CONFIG_MULTILEVEL_WITH_SHARED) || MLKEM_K == 2 || MLKEM_K == 3)
+/*yaml
+  Name: poly_compress_d10_avx2_asm
+  Description: x86_64 AVX2 polynomial compression (d=10)
+  Signature: void mlk_poly_compress_d10_avx2_asm(uint8_t *r, const int16_t *a, const uint8_t *data)
+  ABI:
+    Architecture: x86_64
+    CallingConvention: SysV
+    Features: [AVX2]
+    rdi:
+      type: buffer
+      size_bytes: 320
+      permissions: write-only
+      c_parameter: uint8_t *r
+      description: Output compressed polynomial
+    rsi:
+      type: buffer
+      size_bytes: 512
+      permissions: read-only
+      c_parameter: const int16_t *a
+      description: Input polynomial (256 x int16_t)
+    rdx:
+      type: buffer
+      size_bytes: 32
+      permissions: read-only
+      c_parameter: const uint8_t *data
+      description: Precomputed compression constants
+*/
+
 
 /*
  * WARNING: This file is auto-derived from the mlkem-native source file
- *   dev/x86_64/src/poly_compress_d10_avx2_asm.S using scripts/simpasm. Do not modify it directly.
+ *   dev/x86_64/src/mlkem_poly_compress_d10_avx2_asm.S using scripts/simpasm. Do not modify it directly.
  */
 
 .text
@@ -374,8 +404,9 @@ MLK_ASM_FN_SYMBOL(poly_compress_d10_avx2_asm)
 MLK_ASM_FN_SIZE(poly_compress_d10_avx2_asm)
 
 #endif /* MLK_ARITH_BACKEND_X86_64_DEFAULT && !MLK_CONFIG_MULTILEVEL_NO_SHARED \
-          && (MLK_CONFIG_MULTILEVEL_WITH_SHARED || MLKEM_K == 2 || MLKEM_K == \
-          3) */
+          && (!MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API) && \
+          (MLK_CONFIG_MULTILEVEL_WITH_SHARED || MLKEM_K == 2 || MLKEM_K == 3) \
+        */
 
 #if defined(__ELF__)
 .section .note.GNU-stack,"",%progbits

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/{poly_compress_d11_avx2_asm.S → mlkem_poly_compress_d11_avx2_asm.S}

@@ -33,11 +33,41 @@
 
 #if defined(MLK_ARITH_BACKEND_X86_64_DEFAULT) && \
     !defined(MLK_CONFIG_MULTILEVEL_NO_SHARED) && \
+    (!defined(MLK_CONFIG_NO_ENCAPS_API) || \
+     !defined(MLK_CONFIG_NO_DECAPS_API)) && \
     (defined(MLK_CONFIG_MULTILEVEL_WITH_SHARED) || MLKEM_K == 4)
+/*yaml
+  Name: poly_compress_d11_avx2_asm
+  Description: x86_64 AVX2 polynomial compression (d=11)
+  Signature: void mlk_poly_compress_d11_avx2_asm(uint8_t *r, const int16_t *a, const uint8_t *data)
+  ABI:
+    Architecture: x86_64
+    CallingConvention: SysV
+    Features: [AVX2]
+    rdi:
+      type: buffer
+      size_bytes: 352
+      permissions: write-only
+      c_parameter: uint8_t *r
+      description: Output compressed polynomial
+    rsi:
+      type: buffer
+      size_bytes: 512
+      permissions: read-only
+      c_parameter: const int16_t *a
+      description: Input polynomial (256 x int16_t)
+    rdx:
+      type: buffer
+      size_bytes: 64
+      permissions: read-only
+      c_parameter: const uint8_t *data
+      description: Precomputed compression constants
+*/
+
 
 /*
  * WARNING: This file is auto-derived from the mlkem-native source file
- *   dev/x86_64/src/poly_compress_d11_avx2_asm.S using scripts/simpasm. Do not modify it directly.
+ *   dev/x86_64/src/mlkem_poly_compress_d11_avx2_asm.S using scripts/simpasm. Do not modify it directly.
  */
 
 .text
@@ -441,7 +471,8 @@ MLK_ASM_FN_SYMBOL(poly_compress_d11_avx2_asm)
 MLK_ASM_FN_SIZE(poly_compress_d11_avx2_asm)
 
 #endif /* MLK_ARITH_BACKEND_X86_64_DEFAULT && !MLK_CONFIG_MULTILEVEL_NO_SHARED \
-          && (MLK_CONFIG_MULTILEVEL_WITH_SHARED || MLKEM_K == 4) */
+          && (!MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API) && \
+          (MLK_CONFIG_MULTILEVEL_WITH_SHARED || MLKEM_K == 4) */
 
 #if defined(__ELF__)
 .section .note.GNU-stack,"",%progbits

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/{poly_compress_d4_avx2_asm.S → mlkem_poly_compress_d4_avx2_asm.S}

@@ -31,11 +31,41 @@
 #include "../../../common.h"
 #if defined(MLK_ARITH_BACKEND_X86_64_DEFAULT) && \
     !defined(MLK_CONFIG_MULTILEVEL_NO_SHARED) && \
+    (!defined(MLK_CONFIG_NO_ENCAPS_API) || \
+     !defined(MLK_CONFIG_NO_DECAPS_API)) && \
     (defined(MLK_CONFIG_MULTILEVEL_WITH_SHARED) || MLKEM_K == 2 || MLKEM_K == 3)
+/*yaml
+  Name: poly_compress_d4_avx2_asm
+  Description: x86_64 AVX2 polynomial compression (d=4)
+  Signature: void mlk_poly_compress_d4_avx2_asm(uint8_t *r, const int16_t *a, const uint8_t *data)
+  ABI:
+    Architecture: x86_64
+    CallingConvention: SysV
+    Features: [AVX2]
+    rdi:
+      type: buffer
+      size_bytes: 128
+      permissions: write-only
+      c_parameter: uint8_t *r
+      description: Output compressed polynomial
+    rsi:
+      type: buffer
+      size_bytes: 512
+      permissions: read-only
+      c_parameter: const int16_t *a
+      description: Input polynomial (256 x int16_t)
+    rdx:
+      type: buffer
+      size_bytes: 32
+      permissions: read-only
+      c_parameter: const uint8_t *data
+      description: Precomputed compression constants
+*/
+
 
 /*
  * WARNING: This file is auto-derived from the mlkem-native source file
- *   dev/x86_64/src/poly_compress_d4_avx2_asm.S using scripts/simpasm. Do not modify it directly.
+ *   dev/x86_64/src/mlkem_poly_compress_d4_avx2_asm.S using scripts/simpasm. Do not modify it directly.
  */
 
 .text
@@ -155,8 +185,9 @@ MLK_ASM_FN_SYMBOL(poly_compress_d4_avx2_asm)
 MLK_ASM_FN_SIZE(poly_compress_d4_avx2_asm)
 
 #endif /* MLK_ARITH_BACKEND_X86_64_DEFAULT && !MLK_CONFIG_MULTILEVEL_NO_SHARED \
-          && (MLK_CONFIG_MULTILEVEL_WITH_SHARED || MLKEM_K == 2 || MLKEM_K == \
-          3) */
+          && (!MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API) && \
+          (MLK_CONFIG_MULTILEVEL_WITH_SHARED || MLKEM_K == 2 || MLKEM_K == 3) \
+        */
 
 #if defined(__ELF__)
 .section .note.GNU-stack,"",%progbits