pq_crypto 0.6.4 → 0.6.5

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/poly.h

@@ -99,6 +99,7 @@ __contract__(
   return (int16_t)r;
 }
 
+#if !defined(MLK_CONFIG_NO_KEYPAIR_API)
 #define mlk_poly_tomont MLK_NAMESPACE(poly_tomont)
 /**
  * In-place conversion of all coefficients of a polynomial from the normal
@@ -119,6 +120,7 @@ __contract__(
   assigns(memory_slice(r, sizeof(mlk_poly)))
   ensures(array_abs_bound(r->coeffs, 0, MLKEM_N, MLKEM_Q))
 );
+#endif /* !MLK_CONFIG_NO_KEYPAIR_API */
 
 #define mlk_poly_mulcache_compute MLK_NAMESPACE(poly_mulcache_compute)
 /**
@@ -207,6 +209,7 @@ __contract__(
   assigns(memory_slice(r, sizeof(mlk_poly)))
 );
 
+#if !defined(MLK_CONFIG_NO_DECAPS_API)
 #define mlk_poly_sub MLK_NAMESPACE(poly_sub)
 /**
  * Subtract two polynomials; no modular reduction is performed.
@@ -231,6 +234,7 @@ __contract__(
   ensures(forall(k, 0, MLKEM_N, r->coeffs[k] == old(*r).coeffs[k] - b->coeffs[k]))
   assigns(memory_slice(r, sizeof(mlk_poly)))
 );
+#endif /* !MLK_CONFIG_NO_DECAPS_API */
 
 #define mlk_poly_ntt MLK_NAMESPACE(poly_ntt)
 /**
@@ -260,6 +264,7 @@ __contract__(
   ensures(array_abs_bound(r->coeffs, 0, MLKEM_N, MLK_NTT_BOUND))
 );
 
+#if !defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API)
 #define mlk_poly_invntt_tomont MLK_NAMESPACE(poly_invntt_tomont)
 /**
  * Compute the inverse negacyclic number-theoretic transform (NTT) of a
@@ -286,5 +291,6 @@ __contract__(
   assigns(memory_slice(r, sizeof(mlk_poly)))
   ensures(array_abs_bound(r->coeffs, 0, MLKEM_N, MLK_INVNTT_BOUND))
 );
+#endif /* !MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API */
 
 #endif /* !MLK_POLY_H */

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/poly_k.c

@@ -39,6 +39,7 @@
   MLK_ADD_PARAM_SET(mlk_polyvec_basemul_acc_montgomery_cached_c)
 /* End of parameter set namespacing */
 
+#if !defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API)
 /* Reference: `polyvec_compress()` in the reference implementation @[REF]
  *            - In contrast to the reference implementation, we assume
  *              unsigned canonical coefficients here.
@@ -56,7 +57,9 @@ void mlk_polyvec_compress_du(uint8_t r[MLKEM_POLYVECCOMPRESSEDBYTES_DU],
     mlk_poly_compress_du(r + i * MLKEM_POLYCOMPRESSEDBYTES_DU, &a->vec[i]);
   }
 }
+#endif /* !MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API */
 
+#if !defined(MLK_CONFIG_NO_DECAPS_API)
 /* Reference: `polyvec_decompress()` in the reference implementation @[REF]. */
 MLK_INTERNAL_API
 void mlk_polyvec_decompress_du(mlk_polyvec *r,
@@ -70,7 +73,9 @@ void mlk_polyvec_decompress_du(mlk_polyvec *r,
 
   mlk_assert_bound_2d(r->vec, MLKEM_K, MLKEM_N, 0, MLKEM_Q);
 }
+#endif /* !MLK_CONFIG_NO_DECAPS_API */
 
+#if !defined(MLK_CONFIG_NO_KEYPAIR_API) || !defined(MLK_CONFIG_NO_ENCAPS_API)
 /* Reference: `polyvec_tobytes()` in the reference implementation @[REF].
  *            - In contrast to the reference implementation, we assume
  *              unsigned canonical coefficients here.
@@ -92,7 +97,9 @@ void mlk_polyvec_tobytes(uint8_t r[MLKEM_POLYVECBYTES], const mlk_polyvec *a)
     mlk_poly_tobytes(&r[i * MLKEM_POLYBYTES], &a->vec[i]);
   }
 }
+#endif /* !MLK_CONFIG_NO_KEYPAIR_API || !MLK_CONFIG_NO_ENCAPS_API */
 
+#if !defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API)
 /* Reference: `polyvec_frombytes()` in the reference implementation @[REF]. */
 MLK_INTERNAL_API
 void mlk_polyvec_frombytes(mlk_polyvec *r, const uint8_t a[MLKEM_POLYVECBYTES])
@@ -105,6 +112,7 @@ void mlk_polyvec_frombytes(mlk_polyvec *r, const uint8_t a[MLKEM_POLYVECBYTES])
 
   mlk_assert_bound_2d(r->vec, MLKEM_K, MLKEM_N, 0, MLKEM_UINT12_LIMIT);
 }
+#endif /* !MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API */
 
 /* Reference: `polyvec_ntt()` in the reference implementation @[REF]. */
 MLK_INTERNAL_API
@@ -124,6 +132,7 @@ void mlk_polyvec_ntt(mlk_polyvec *r)
  *              while the reference implementation normalizes at
  *              the end. This allows us to drop a call to `poly_reduce()`
  *              from the base multiplication. */
+#if !defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API)
 MLK_INTERNAL_API
 void mlk_polyvec_invntt_tomont(mlk_polyvec *r)
 {
@@ -135,6 +144,7 @@ void mlk_polyvec_invntt_tomont(mlk_polyvec *r)
 
   mlk_assert_abs_bound_2d(r->vec, MLKEM_K, MLKEM_N, MLK_INVNTT_BOUND);
 }
+#endif /* !MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API */
 
 /* Reference: `polyvec_basemul_acc_montgomery()` in the
  *            reference implementation @[REF].
@@ -279,6 +289,7 @@ void mlk_polyvec_add(mlk_polyvec *r, const mlk_polyvec *b)
   }
 }
 
+#if !defined(MLK_CONFIG_NO_KEYPAIR_API)
 /* Reference: `polyvec_tomont()` in the reference implementation @[REF]. */
 MLK_INTERNAL_API
 void mlk_polyvec_tomont(mlk_polyvec *r)
@@ -291,6 +302,7 @@ void mlk_polyvec_tomont(mlk_polyvec *r)
 
   mlk_assert_abs_bound_2d(r->vec, MLKEM_K, MLKEM_N, MLKEM_Q);
 }
+#endif /* !MLK_CONFIG_NO_KEYPAIR_API */
 
 
 /**
@@ -325,6 +337,9 @@ __contract__(
 #endif
 }
 
+#if !defined(MLK_CONFIG_NO_KEYPAIR_API) ||                              \
+    (MLKEM_ETA1 == MLKEM_ETA2 && (!defined(MLK_CONFIG_NO_ENCAPS_API) || \
+                                  !defined(MLK_CONFIG_NO_DECAPS_API)))
 /* Reference: Does not exist in the reference implementation @[REF].
  *            - This implements a x4-batched version of `poly_getnoise_eta1()`
  *              from the reference implementation, to leverage
@@ -378,8 +393,11 @@ void mlk_poly_getnoise_eta1_4x(mlk_poly *r0, mlk_poly *r1, mlk_poly *r2,
   mlk_zeroize(buf, sizeof(buf));
   mlk_zeroize(extkey, sizeof(extkey));
 }
+#endif /* !MLK_CONFIG_NO_KEYPAIR_API || (MLKEM_ETA1 == MLKEM_ETA2 && \
+          (!MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API)) */
 
-#if MLKEM_K == 2 || MLKEM_K == 4
+#if (MLKEM_K == 2 || MLKEM_K == 4) && \
+    (!defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API))
 /**
  * Given an array of uniformly random bytes, compute a polynomial with
  * coefficients distributed according to a centered binomial distribution
@@ -431,9 +449,11 @@ void mlk_poly_getnoise_eta2(mlk_poly *r, const uint8_t seed[MLKEM_SYMBYTES],
   mlk_zeroize(buf, sizeof(buf));
   mlk_zeroize(extkey, sizeof(extkey));
 }
-#endif /* MLKEM_K == 2 || MLKEM_K == 4 */
+#endif /* (MLKEM_K == 2 || MLKEM_K == 4) && (!MLK_CONFIG_NO_ENCAPS_API || \
+          !MLK_CONFIG_NO_DECAPS_API) */
 
-#if MLKEM_K == 2
+#if MLKEM_K == 2 && \
+    (!defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API))
 /* Reference: Does not exist in the reference implementation @[REF].
  *            - This implements a x4-batched version of `poly_getnoise_eta1()`
  *              and `poly_getnoise_eta2()` from the reference implementation,
@@ -492,7 +512,8 @@ void mlk_poly_getnoise_eta1122_4x(mlk_poly *r0, mlk_poly *r1, mlk_poly *r2,
   mlk_zeroize(buf, sizeof(buf));
   mlk_zeroize(extkey, sizeof(extkey));
 }
-#endif /* MLKEM_K == 2 */
+#endif /* MLKEM_K == 2 && (!MLK_CONFIG_NO_ENCAPS_API || \
+          !MLK_CONFIG_NO_DECAPS_API) */
 
 /* To facilitate single-compilation-unit (SCU) builds, undefine all macros.
  * Don't modify by hand -- this is auto-generated by scripts/autogen. */

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/poly_k.h

@@ -46,6 +46,7 @@ typedef struct
   mlk_poly_mulcache vec[MLKEM_K]; /**< Per-component caches. */
 } MLK_ALIGN mlk_polyvec_mulcache;
 
+#if !defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API)
 #define mlk_poly_compress_du MLK_NAMESPACE_K(poly_compress_du)
 /**
  * Compression (du bits) and subsequent serialization of a polynomial.
@@ -75,7 +76,9 @@ __contract__(
 #error "Invalid value of MLKEM_DU"
 #endif
 }
+#endif /* !MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API */
 
+#if !defined(MLK_CONFIG_NO_DECAPS_API)
 #define mlk_poly_decompress_du MLK_NAMESPACE_K(poly_decompress_du)
 /**
  * De-serialization and subsequent decompression (du bits) of a polynomial;
@@ -108,7 +111,9 @@ __contract__(
 #error "Invalid value of MLKEM_DU"
 #endif
 }
+#endif /* !MLK_CONFIG_NO_DECAPS_API */
 
+#if !defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API)
 #define mlk_poly_compress_dv MLK_NAMESPACE_K(poly_compress_dv)
 /**
  * Compression (dv bits) and subsequent serialization of a polynomial.
@@ -138,8 +143,10 @@ __contract__(
 #error "Invalid value of MLKEM_DV"
 #endif
 }
+#endif /* !MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API */
 
 
+#if !defined(MLK_CONFIG_NO_DECAPS_API)
 #define mlk_poly_decompress_dv MLK_NAMESPACE_K(poly_decompress_dv)
 /**
  * De-serialization and subsequent decompression (dv bits) of a polynomial;
@@ -172,7 +179,9 @@ __contract__(
 #error "Invalid value of MLKEM_DV"
 #endif
 }
+#endif /* !MLK_CONFIG_NO_DECAPS_API */
 
+#if !defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API)
 #define mlk_polyvec_compress_du MLK_NAMESPACE_K(polyvec_compress_du)
 /**
  * Compress and serialize a vector of polynomials.
@@ -196,7 +205,9 @@ __contract__(
          array_bound(a->vec[k0].coeffs, 0, MLKEM_N, 0, MLKEM_Q)))
   assigns(memory_slice(r, MLKEM_POLYVECCOMPRESSEDBYTES_DU))
 );
+#endif /* !MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API */
 
+#if !defined(MLK_CONFIG_NO_DECAPS_API)
 #define mlk_polyvec_decompress_du MLK_NAMESPACE_K(polyvec_decompress_du)
 /**
  * De-serialize and decompress a vector of polynomials; approximate inverse
@@ -221,7 +232,9 @@ __contract__(
   ensures(forall(k0, 0, MLKEM_K,
          array_bound(r->vec[k0].coeffs, 0, MLKEM_N, 0, MLKEM_Q)))
 );
+#endif /* !MLK_CONFIG_NO_DECAPS_API */
 
+#if !defined(MLK_CONFIG_NO_KEYPAIR_API) || !defined(MLK_CONFIG_NO_ENCAPS_API)
 #define mlk_polyvec_tobytes MLK_NAMESPACE_K(polyvec_tobytes)
 /**
  * Serialize a vector of polynomials.
@@ -243,7 +256,9 @@ __contract__(
          array_bound(a->vec[k0].coeffs, 0, MLKEM_N, 0, MLKEM_Q)))
   assigns(memory_slice(r, MLKEM_POLYVECBYTES))
 );
+#endif /* !MLK_CONFIG_NO_KEYPAIR_API || !MLK_CONFIG_NO_ENCAPS_API */
 
+#if !defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API)
 #define mlk_polyvec_frombytes MLK_NAMESPACE_K(polyvec_frombytes)
 /**
  * De-serialize a vector of polynomials; inverse of mlk_polyvec_tobytes.
@@ -265,6 +280,7 @@ __contract__(
   ensures(forall(k0, 0, MLKEM_K,
         array_bound(r->vec[k0].coeffs, 0, MLKEM_N, 0, MLKEM_UINT12_LIMIT)))
 );
+#endif /* !MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API */
 
 #define mlk_polyvec_ntt MLK_NAMESPACE_K(polyvec_ntt)
 /**
@@ -292,6 +308,7 @@ __contract__(
   array_abs_bound(r->vec[j].coeffs, 0, MLKEM_N, MLK_NTT_BOUND)))
 );
 
+#if !defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API)
 #define mlk_polyvec_invntt_tomont MLK_NAMESPACE_K(polyvec_invntt_tomont)
 /**
  * Apply inverse NTT to all elements of a vector of polynomials and multiply
@@ -316,6 +333,7 @@ __contract__(
   ensures(forall(j, 0, MLKEM_K,
   array_abs_bound(r->vec[j].coeffs, 0, MLKEM_N, MLK_INVNTT_BOUND)))
 );
+#endif /* !MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API */
 
 #define mlk_polyvec_basemul_acc_montgomery_cached \
   MLK_NAMESPACE_K(polyvec_basemul_acc_montgomery_cached)
@@ -442,6 +460,7 @@ __contract__(
   assigns(memory_slice(r, sizeof(mlk_polyvec)))
 );
 
+#if !defined(MLK_CONFIG_NO_KEYPAIR_API)
 #define mlk_polyvec_tomont MLK_NAMESPACE_K(polyvec_tomont)
 /**
  * In-place conversion of all coefficients of a polynomial vector from the
@@ -463,7 +482,11 @@ __contract__(
   ensures(forall(j, 0, MLKEM_K,
     array_abs_bound(r->vec[j].coeffs, 0, MLKEM_N, MLKEM_Q)))
 );
+#endif /* !MLK_CONFIG_NO_KEYPAIR_API */
 
+#if !defined(MLK_CONFIG_NO_KEYPAIR_API) ||                              \
+    (MLKEM_ETA1 == MLKEM_ETA2 && (!defined(MLK_CONFIG_NO_ENCAPS_API) || \
+                                  !defined(MLK_CONFIG_NO_DECAPS_API)))
 #define mlk_poly_getnoise_eta1_4x MLK_NAMESPACE_K(poly_getnoise_eta1_4x)
 /**
  * Batch sample four polynomials deterministically from a seed and nonces,
@@ -515,8 +538,11 @@ __contract__(
  */
 #define mlk_poly_getnoise_eta2_4x mlk_poly_getnoise_eta1_4x
 #endif /* MLKEM_ETA1 == MLKEM_ETA2 */
+#endif /* !MLK_CONFIG_NO_KEYPAIR_API || (MLKEM_ETA1 == MLKEM_ETA2 && \
+          (!MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API)) */
 
-#if MLKEM_K == 2 || MLKEM_K == 4
+#if (MLKEM_K == 2 || MLKEM_K == 4) && \
+    (!defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API))
 #define mlk_poly_getnoise_eta2 MLK_NAMESPACE_K(poly_getnoise_eta2)
 /**
  * Sample a polynomial deterministically from a seed and a nonce, with
@@ -541,9 +567,11 @@ __contract__(
   assigns(memory_slice(r, sizeof(mlk_poly)))
   ensures(array_abs_bound(r->coeffs, 0, MLKEM_N, MLKEM_ETA2 + 1))
 );
-#endif /* MLKEM_K == 2 || MLKEM_K == 4 */
+#endif /* (MLKEM_K == 2 || MLKEM_K == 4) && (!MLK_CONFIG_NO_ENCAPS_API || \
+          !MLK_CONFIG_NO_DECAPS_API) */
 
-#if MLKEM_K == 2
+#if MLKEM_K == 2 && \
+    (!defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API))
 #define mlk_poly_getnoise_eta1122_4x MLK_NAMESPACE_K(poly_getnoise_eta1122_4x)
 /**
  * Batch sample four polynomials deterministically from a seed and nonces,
@@ -588,6 +616,7 @@ __contract__(
        && array_abs_bound(r2->coeffs,0, MLKEM_N, MLKEM_ETA2 + 1)
        && array_abs_bound(r3->coeffs,0, MLKEM_N, MLKEM_ETA2 + 1))
 );
-#endif /* MLKEM_K == 2 */
+#endif /* MLKEM_K == 2 && (!MLK_CONFIG_NO_ENCAPS_API || \
+          !MLK_CONFIG_NO_DECAPS_API) */
 
 #endif /* !MLK_POLY_K_H */

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/sampling.c

@@ -251,6 +251,8 @@ void mlk_poly_rej_uniform(mlk_poly *entry, uint8_t seed[MLKEM_SYMBYTES + 2])
   mlk_zeroize(buf, sizeof(buf));
 }
 
+#if defined(MLK_CONFIG_MULTILEVEL_WITH_SHARED) || MLKEM_ETA1 == 2 || \
+    !defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API)
 /**
  * Load 4 bytes into a 32-bit integer in little-endian order.
  *
@@ -300,6 +302,8 @@ void mlk_poly_cbd2(mlk_poly *r, const uint8_t buf[2 * MLKEM_N / 4])
     }
   }
 }
+#endif /* MLK_CONFIG_MULTILEVEL_WITH_SHARED || MLKEM_ETA1 == 2 || \
+          !MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API */
 
 #if defined(MLK_CONFIG_MULTILEVEL_WITH_SHARED) || MLKEM_ETA1 == 3
 /**

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/sampling.h

@@ -19,6 +19,8 @@
 #include "common.h"
 #include "poly.h"
 
+#if defined(MLK_CONFIG_MULTILEVEL_WITH_SHARED) || MLKEM_ETA1 == 2 || \
+    !defined(MLK_CONFIG_NO_ENCAPS_API) || !defined(MLK_CONFIG_NO_DECAPS_API)
 #define mlk_poly_cbd2 MLK_NAMESPACE(poly_cbd2)
 /**
  * Given an array of uniformly random bytes, compute a polynomial with
@@ -32,6 +34,8 @@
  */
 MLK_INTERNAL_API
 void mlk_poly_cbd2(mlk_poly *r, const uint8_t buf[2 * MLKEM_N / 4]);
+#endif /* MLK_CONFIG_MULTILEVEL_WITH_SHARED || MLKEM_ETA1 == 2 || \
+          !MLK_CONFIG_NO_ENCAPS_API || !MLK_CONFIG_NO_DECAPS_API */
 
 #if defined(MLK_CONFIG_MULTILEVEL_WITH_SHARED) || MLKEM_ETA1 == 3
 #define mlk_poly_cbd3 MLK_NAMESPACE(poly_cbd3)

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/sys.h

@@ -37,6 +37,21 @@
 #define MLK_SYS_AARCH64
 #endif
 
+/* Check if the AArch64 compilation target supports NEON (Advanced SIMD).
+ *
+ * Some compilers also define __ARM_NEON__, but __ARM_NEON is the most reliable
+ * signal. Specifically, clang on Apple appears to keep __ARM_NEON__ set even if
+ * -march=armv8-a+nosimd is set.
+ *
+ * gcc 4.8 -- the first gcc version introducing Neon support -- sets neither
+ * __ARM_NEON nor __ARM_NEON__; in fact, there is no preprocessor signal that
+ * Neon is enabled. If you use gcc 4.8, you should set __ARM_NEON manually.
+ * gcc 4.9 onwards do set __ARM_NEON.
+ */
+#if defined(MLK_SYS_AARCH64) && defined(__ARM_NEON)
+#define MLK_SYS_AARCH64_NEON
+#endif
+
 /* Check if we're running on an AArch64 big endian system. */
 #if defined(__AARCH64EB__)
 #define MLK_SYS_AARCH64_EB
@@ -275,7 +290,10 @@ typedef enum
   /* x86_64 */
   MLK_SYS_CAP_AVX2,
   /* AArch64 */
-  MLK_SYS_CAP_SHA3
+  MLK_SYS_CAP_NEON,
+  MLK_SYS_CAP_SHA3,
+  /* Armv8.1-M */
+  MLK_SYS_CAP_MVE
 } mlk_sys_cap;
 
 #if !defined(MLK_CONFIG_CUSTOM_CAPABILITY_FUNC)

data/lib/pq_crypto/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PQCrypto
-  VERSION = "0.6.4"
+  VERSION = "0.6.5"
 end

data/script/vendor_libs.rb

@@ -13,9 +13,9 @@ MANIFEST_PATH = File.join(VENDOR_DIR, ".vendored")
 PINS = {
   mlkem: {
     repo: "https://github.com/pq-code-package/mlkem-native.git",
-    ref: "v1.2.0",
-    commit: "0ba906cb14b1c241476134d7403a811b382ca498",
-    tree_sha256: "cc78ed199b8c65abe68635b23a13b294d5a8deb20c8bc7b4d76590c00976bb2d",
+    ref: "v1.3.0",
+    commit: "398050c877ff4353c96305c6434b63528accfc37",
+    tree_sha256: "3cd7af93cde256f73ce5ffde3ac3accd31e4361616e275f1bf1c39d462c2149e",
     target: "mlkem-native",
     source_dir: "mlkem"
   },

metadata

@@ -1,14 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: pq_crypto
 version: !ruby/object:Gem::Version
-  version: 0.6.4
+  version: 0.6.5
 platform: ruby
 authors:
 - Roman Haydarov
-autorequire:
 bindir: exe
 cert_chain: []
-date: 2026-07-19 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake
@@ -210,6 +209,7 @@ files:
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/common.h
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/compress.c
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/compress.h
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/context.h
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/debug.c
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/debug.h
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/fips202/fips202.c
@@ -237,9 +237,9 @@ files:
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/fips202/native/armv81m/src/fips202_native_armv81m.h
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/fips202/native/armv81m/src/keccak_f1600_x4_mve.S
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/fips202/native/armv81m/src/keccak_f1600_x4_mve.c
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/fips202/native/armv81m/src/keccak_f1600_x4_state_extract_bytes_mve.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/fips202/native/armv81m/src/keccak_f1600_x4_state_xor_bytes_mve.S
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/fips202/native/armv81m/src/keccakf1600_round_constants.c
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/fips202/native/armv81m/src/state_extract_bytes_x4_mve.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/fips202/native/armv81m/src/state_xor_bytes_x4_mve.S
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/fips202/native/auto.h
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/fips202/native/x86_64/keccak_f1600_x4_avx2.h
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/fips202/native/x86_64/src/fips202_native_x86_64.h
@@ -253,16 +253,16 @@ files:
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/meta.h
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/aarch64_zetas.c
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/arith_native_aarch64.h
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/intt_aarch64_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/ntt_aarch64_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/poly_mulcache_compute_aarch64_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/poly_reduce_aarch64_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/poly_tobytes_aarch64_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/poly_tomont_aarch64_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/polyvec_basemul_acc_montgomery_cached_k2_aarch64_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/polyvec_basemul_acc_montgomery_cached_k3_aarch64_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/polyvec_basemul_acc_montgomery_cached_k4_aarch64_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/rej_uniform_aarch64_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/mlkem_intt_aarch64_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/mlkem_ntt_aarch64_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/mlkem_poly_mulcache_compute_aarch64_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/mlkem_poly_reduce_aarch64_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/mlkem_poly_tobytes_aarch64_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/mlkem_poly_tomont_aarch64_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/mlkem_polyvec_basemul_acc_montgomery_cached_k2_aarch64_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/mlkem_polyvec_basemul_acc_montgomery_cached_k3_aarch64_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/mlkem_polyvec_basemul_acc_montgomery_cached_k4_aarch64_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/mlkem_rej_uniform_aarch64_asm.S
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/rej_uniform_table.c
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/api.h
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/meta.h
@@ -271,10 +271,10 @@ files:
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/ppc64le/src/arith_native_ppc64le.h
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/ppc64le/src/consts.c
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/ppc64le/src/consts.h
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/ppc64le/src/intt_ppc_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/ppc64le/src/ntt_ppc_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/ppc64le/src/poly_tomont_ppc_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/ppc64le/src/reduce_ppc_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/ppc64le/src/mlkem_intt_ppc_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/ppc64le/src/mlkem_ntt_ppc_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/ppc64le/src/mlkem_poly_tomont_ppc_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/ppc64le/src/mlkem_reduce_ppc_asm.S
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/riscv64/README.md
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/riscv64/meta.h
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/riscv64/src/arith_native_riscv64.h
@@ -291,27 +291,27 @@ files:
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/compress_consts.h
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/consts.c
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/consts.h
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/intt_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/ntt_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/nttfrombytes_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/ntttobytes_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/nttunpack_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/poly_compress_d10_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/poly_compress_d11_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/poly_compress_d4_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/poly_compress_d5_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/poly_decompress_d10_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/poly_decompress_d11_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/poly_decompress_d4_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/poly_decompress_d5_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/poly_mulcache_compute_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/polyvec_basemul_acc_montgomery_cached_k2_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/polyvec_basemul_acc_montgomery_cached_k3_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/polyvec_basemul_acc_montgomery_cached_k4_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/reduce_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/rej_uniform_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_intt_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_ntt_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_nttfrombytes_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_ntttobytes_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_nttunpack_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_poly_compress_d10_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_poly_compress_d11_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_poly_compress_d4_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_poly_compress_d5_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_poly_decompress_d10_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_poly_decompress_d11_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_poly_decompress_d4_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_poly_decompress_d5_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_poly_mulcache_compute_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_polyvec_basemul_acc_montgomery_cached_k2_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_polyvec_basemul_acc_montgomery_cached_k3_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_polyvec_basemul_acc_montgomery_cached_k4_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_reduce_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_rej_uniform_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_tomont_avx2_asm.S
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/rej_uniform_table.c
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/tomont_avx2_asm.S
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/params.h
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/poly.c
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/poly.h
@@ -348,7 +348,6 @@ metadata:
   homepage_uri: https://github.com/roman-haidarov/pq_crypto
   source_code_uri: https://github.com/roman-haidarov/pq_crypto/tree/main
   changelog_uri: https://github.com/roman-haidarov/pq_crypto/blob/main/CHANGELOG.md
-post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -363,8 +362,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.22
-signing_key:
+rubygems_version: 3.6.7
 specification_version: 4
 summary: Primitive-first post-quantum cryptography for Ruby
 test_files: []