pq_crypto 0.6.4 → 0.6.6

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/sys.h

@@ -37,6 +37,21 @@
 #define MLK_SYS_AARCH64
 #endif
 
+/* Check if the AArch64 compilation target supports NEON (Advanced SIMD).
+ *
+ * Some compilers also define __ARM_NEON__, but __ARM_NEON is the most reliable
+ * signal. Specifically, clang on Apple appears to keep __ARM_NEON__ set even if
+ * -march=armv8-a+nosimd is set.
+ *
+ * gcc 4.8 -- the first gcc version introducing Neon support -- sets neither
+ * __ARM_NEON nor __ARM_NEON__; in fact, there is no preprocessor signal that
+ * Neon is enabled. If you use gcc 4.8, you should set __ARM_NEON manually.
+ * gcc 4.9 onwards do set __ARM_NEON.
+ */
+#if defined(MLK_SYS_AARCH64) && defined(__ARM_NEON)
+#define MLK_SYS_AARCH64_NEON
+#endif
+
 /* Check if we're running on an AArch64 big endian system. */
 #if defined(__AARCH64EB__)
 #define MLK_SYS_AARCH64_EB
@@ -195,7 +210,7 @@
 #endif
 
 
-/* New X86_64 CPUs support Conflow-flow protection using the CET instructions.
+/* New X86_64 CPUs support control-flow protection using the CET instructions.
  * When enabled (through -fcf-protection=), all compilation units (including
  * empty ones) need to support CET for this to work.
  * For assembly, this means that source files need to signal support for
@@ -273,9 +288,12 @@
 typedef enum
 {
   /* x86_64 */
-  MLK_SYS_CAP_AVX2,
+  MLK_SYS_CAP_X86_64_AVX2,
   /* AArch64 */
-  MLK_SYS_CAP_SHA3
+  MLK_SYS_CAP_AARCH64_NEON,
+  MLK_SYS_CAP_AARCH64_SHA3,
+  /* Armv8.1-M */
+  MLK_SYS_CAP_ARMV81M_MVE
 } mlk_sys_cap;
 
 #if !defined(MLK_CONFIG_CUSTOM_CAPABILITY_FUNC)

data/ext/pqcrypto/vendor/mlkem-native/mlkem/src/verify.h

@@ -419,17 +419,20 @@ __contract__(
 #if !defined(MLK_CONFIG_CUSTOM_ZEROIZE)
 #if defined(MLK_SYS_WINDOWS)
 #include <windows.h>
+#elif !defined(MLK_HAVE_INLINE_ASM)
+#error No plausibly-secure implementation of mlk_zeroize available. Please provide your own using MLK_CONFIG_CUSTOM_ZEROIZE.
+#endif
+
 static MLK_INLINE void mlk_zeroize(void *ptr, size_t len)
 __contract__(
+  requires(len <= UINT32_MAX)
   requires(memory_no_alias(ptr, len))
-  assigns(memory_slice(ptr, len))) { SecureZeroMemory(ptr, len); }
-#elif defined(MLK_HAVE_INLINE_ASM)
-#include <string.h>
-static MLK_INLINE void mlk_zeroize(void *ptr, size_t len)
-__contract__(
-  requires(memory_no_alias(ptr, len))
-  assigns(memory_slice(ptr, len)))
+  assigns(memory_slice(ptr, len))
+  ensures(array_zeroized_u8((uint8_t *)ptr, len)))
 {
+#if defined(MLK_SYS_WINDOWS)
+  SecureZeroMemory(ptr, len);
+#else
   mlk_memset(ptr, 0, len);
   /* This follows OpenSSL and seems sufficient to prevent the compiler
    * from optimizing away the memset.
@@ -437,10 +440,8 @@ __contract__(
    * If there was a reliable way to detect availability of memset_s(),
    * that would be preferred. */
   __asm__ volatile("" : : "r"(ptr) : "memory");
+#endif /* !MLK_SYS_WINDOWS */
 }
-#else /* !MLK_SYS_WINDOWS && MLK_HAVE_INLINE_ASM */
-#error No plausibly-secure implementation of mlk_zeroize available. Please provide your own using MLK_CONFIG_CUSTOM_ZEROIZE.
-#endif /* !MLK_SYS_WINDOWS && !MLK_HAVE_INLINE_ASM */
 #endif /* !MLK_CONFIG_CUSTOM_ZEROIZE */
 
 #endif /* !MLK_VERIFY_H */

data/lib/pq_crypto/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PQCrypto
-  VERSION = "0.6.4"
+  VERSION = "0.6.6"
 end

data/script/vendor_libs.rb

@@ -13,17 +13,17 @@ MANIFEST_PATH = File.join(VENDOR_DIR, ".vendored")
 PINS = {
   mlkem: {
     repo: "https://github.com/pq-code-package/mlkem-native.git",
-    ref: "v1.2.0",
-    commit: "0ba906cb14b1c241476134d7403a811b382ca498",
-    tree_sha256: "cc78ed199b8c65abe68635b23a13b294d5a8deb20c8bc7b4d76590c00976bb2d",
+    ref: "v2.0.0",
+    commit: "d1b2fe782888bdb761a50336012923180be7f502",
+    tree_sha256: "18bfa9ea4e2232bdf56f8ec374b62d10e50b99a30cb08aafc18d0b97e00cd06f",
     target: "mlkem-native",
     source_dir: "mlkem"
   },
   mldsa: {
     repo: "https://github.com/pq-code-package/mldsa-native.git",
-    ref: "v1.0.0-beta2",
-    commit: "9b0ee84f4cf399043eca59eca4e5f8531ca1d61b",
-    tree_sha256: "2887f59926c18a877e8c5a5e30727e84497c357032093d00d7135aedf53f011e",
+    ref: "v2.0.0",
+    commit: "834a90d5e846ffa1e1611bd24e160bb2e9b86d35",
+    tree_sha256: "25b3c3949d2ed37d1ad5d4722c8476d13deb2a0bb945f12444f463378d69375d",
     target: "mldsa-native",
     source_dir: "mldsa"
   }

metadata

@@ -1,14 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: pq_crypto
 version: !ruby/object:Gem::Version
-  version: 0.6.4
+  version: 0.6.6
 platform: ruby
 authors:
 - Roman Haydarov
-autorequire:
 bindir: exe
 cert_chain: []
-date: 2026-07-19 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake
@@ -83,6 +82,7 @@ files:
 - ext/pqcrypto/vendor/mldsa-native/LICENSE
 - ext/pqcrypto/vendor/mldsa-native/META.yml
 - ext/pqcrypto/vendor/mldsa-native/README.md
+- ext/pqcrypto/vendor/mldsa-native/RELEASE.md
 - ext/pqcrypto/vendor/mldsa-native/SECURITY.md
 - ext/pqcrypto/vendor/mldsa-native/mldsa/README.md
 - ext/pqcrypto/vendor/mldsa-native/mldsa/mldsa_native.c
@@ -91,6 +91,7 @@ files:
 - ext/pqcrypto/vendor/mldsa-native/mldsa/mldsa_native_config.h
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/cbmc.h
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/common.h
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/context.h
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/ct.c
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/ct.h
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/debug.c
@@ -120,9 +121,9 @@ files:
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/fips202/native/armv81m/src/fips202_native_armv81m.h
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/fips202/native/armv81m/src/keccak_f1600_x4_mve.S
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/fips202/native/armv81m/src/keccak_f1600_x4_mve.c
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/fips202/native/armv81m/src/keccak_f1600_x4_state_extract_bytes_mve.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/fips202/native/armv81m/src/keccak_f1600_x4_state_xor_bytes_mve.S
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/fips202/native/armv81m/src/keccakf1600_round_constants.c
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/fips202/native/armv81m/src/state_extract_bytes_x4_mve.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/fips202/native/armv81m/src/state_xor_bytes_x4_mve.S
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/fips202/native/auto.h
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/fips202/native/x86_64/keccak_f1600_x4_avx2.h
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/fips202/native/x86_64/src/fips202_native_x86_64.h
@@ -131,24 +132,24 @@ files:
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/meta.h
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/aarch64_zetas.c
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/arith_native_aarch64.h
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/intt_aarch64_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mld_polyvecl_pointwise_acc_montgomery_l4_aarch64_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mld_polyvecl_pointwise_acc_montgomery_l5_aarch64_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mld_polyvecl_pointwise_acc_montgomery_l7_aarch64_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/ntt_aarch64_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/pointwise_montgomery_aarch64_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/poly_caddq_aarch64_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/poly_chknorm_aarch64_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/poly_decompose_32_aarch64_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/poly_decompose_88_aarch64_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/poly_use_hint_32_aarch64_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/poly_use_hint_88_aarch64_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/polyz_unpack_17_aarch64_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/polyz_unpack_19_aarch64_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mldsa_intt_aarch64_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mldsa_ntt_aarch64_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mldsa_pointwise_montgomery_aarch64_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mldsa_poly_caddq_aarch64_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mldsa_poly_chknorm_aarch64_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mldsa_poly_decompose_32_aarch64_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mldsa_poly_decompose_88_aarch64_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mldsa_poly_use_hint_32_aarch64_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mldsa_poly_use_hint_88_aarch64_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mldsa_polyvecl_pointwise_acc_montgomery_l4_aarch64_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mldsa_polyvecl_pointwise_acc_montgomery_l5_aarch64_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mldsa_polyvecl_pointwise_acc_montgomery_l7_aarch64_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mldsa_polyz_unpack_17_aarch64_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mldsa_polyz_unpack_19_aarch64_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mldsa_rej_uniform_aarch64_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mldsa_rej_uniform_eta2_aarch64_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/mldsa_rej_uniform_eta4_aarch64_asm.S
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/polyz_unpack_table.c
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/rej_uniform_aarch64_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/rej_uniform_eta2_aarch64_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/rej_uniform_eta4_aarch64_asm.S
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/rej_uniform_eta_table.c
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/aarch64/src/rej_uniform_table.c
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/api.h
@@ -157,24 +158,24 @@ files:
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/arith_native_x86_64.h
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/consts.c
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/consts.h
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/intt_avx2_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/ntt_avx2_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/nttunpack_avx2_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/pointwise_acc_l4_avx2_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/pointwise_acc_l5_avx2_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/pointwise_acc_l7_avx2_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/pointwise_avx2_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/poly_caddq_avx2_asm.S
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/poly_chknorm_avx2.c
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/poly_decompose_32_avx2.c
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/poly_decompose_88_avx2.c
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/poly_use_hint_32_avx2.c
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/poly_use_hint_88_avx2.c
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/polyz_unpack_17_avx2.c
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/polyz_unpack_19_avx2.c
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/rej_uniform_avx2.c
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/rej_uniform_eta2_avx2.c
-- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/rej_uniform_eta4_avx2.c
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_intt_avx2_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_ntt_avx2_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_nttunpack_avx2_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_pointwise_acc_l4_avx2_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_pointwise_acc_l5_avx2_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_pointwise_acc_l7_avx2_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_pointwise_avx2_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_poly_caddq_avx2_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_poly_chknorm_avx2_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_poly_decompose_32_avx2_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_poly_decompose_88_avx2_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_poly_use_hint_32_avx2_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_poly_use_hint_88_avx2_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_polyz_unpack_17_avx2_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_polyz_unpack_19_avx2_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_rej_uniform_avx2_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_rej_uniform_eta2_avx2_asm.S
+- ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/mldsa_rej_uniform_eta4_avx2_asm.S
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/rej_uniform_table.c
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/packing.c
 - ext/pqcrypto/vendor/mldsa-native/mldsa/src/packing.h
@@ -210,6 +211,7 @@ files:
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/common.h
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/compress.c
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/compress.h
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/context.h
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/debug.c
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/debug.h
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/fips202/fips202.c
@@ -237,9 +239,9 @@ files:
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/fips202/native/armv81m/src/fips202_native_armv81m.h
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/fips202/native/armv81m/src/keccak_f1600_x4_mve.S
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/fips202/native/armv81m/src/keccak_f1600_x4_mve.c
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/fips202/native/armv81m/src/keccak_f1600_x4_state_extract_bytes_mve.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/fips202/native/armv81m/src/keccak_f1600_x4_state_xor_bytes_mve.S
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/fips202/native/armv81m/src/keccakf1600_round_constants.c
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/fips202/native/armv81m/src/state_extract_bytes_x4_mve.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/fips202/native/armv81m/src/state_xor_bytes_x4_mve.S
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/fips202/native/auto.h
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/fips202/native/x86_64/keccak_f1600_x4_avx2.h
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/fips202/native/x86_64/src/fips202_native_x86_64.h
@@ -253,16 +255,16 @@ files:
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/meta.h
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/aarch64_zetas.c
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/arith_native_aarch64.h
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/intt_aarch64_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/ntt_aarch64_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/poly_mulcache_compute_aarch64_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/poly_reduce_aarch64_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/poly_tobytes_aarch64_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/poly_tomont_aarch64_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/polyvec_basemul_acc_montgomery_cached_k2_aarch64_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/polyvec_basemul_acc_montgomery_cached_k3_aarch64_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/polyvec_basemul_acc_montgomery_cached_k4_aarch64_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/rej_uniform_aarch64_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/mlkem_intt_aarch64_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/mlkem_ntt_aarch64_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/mlkem_poly_mulcache_compute_aarch64_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/mlkem_poly_reduce_aarch64_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/mlkem_poly_tobytes_aarch64_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/mlkem_poly_tomont_aarch64_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/mlkem_polyvec_basemul_acc_montgomery_cached_k2_aarch64_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/mlkem_polyvec_basemul_acc_montgomery_cached_k3_aarch64_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/mlkem_polyvec_basemul_acc_montgomery_cached_k4_aarch64_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/mlkem_rej_uniform_aarch64_asm.S
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/aarch64/src/rej_uniform_table.c
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/api.h
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/meta.h
@@ -271,10 +273,10 @@ files:
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/ppc64le/src/arith_native_ppc64le.h
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/ppc64le/src/consts.c
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/ppc64le/src/consts.h
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/ppc64le/src/intt_ppc_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/ppc64le/src/ntt_ppc_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/ppc64le/src/poly_tomont_ppc_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/ppc64le/src/reduce_ppc_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/ppc64le/src/mlkem_intt_ppc_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/ppc64le/src/mlkem_ntt_ppc_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/ppc64le/src/mlkem_poly_tomont_ppc_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/ppc64le/src/mlkem_reduce_ppc_asm.S
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/riscv64/README.md
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/riscv64/meta.h
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/riscv64/src/arith_native_riscv64.h
@@ -291,27 +293,27 @@ files:
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/compress_consts.h
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/consts.c
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/consts.h
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/intt_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/ntt_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/nttfrombytes_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/ntttobytes_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/nttunpack_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/poly_compress_d10_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/poly_compress_d11_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/poly_compress_d4_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/poly_compress_d5_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/poly_decompress_d10_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/poly_decompress_d11_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/poly_decompress_d4_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/poly_decompress_d5_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/poly_mulcache_compute_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/polyvec_basemul_acc_montgomery_cached_k2_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/polyvec_basemul_acc_montgomery_cached_k3_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/polyvec_basemul_acc_montgomery_cached_k4_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/reduce_avx2_asm.S
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/rej_uniform_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_intt_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_ntt_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_nttfrombytes_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_ntttobytes_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_nttunpack_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_poly_compress_d10_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_poly_compress_d11_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_poly_compress_d4_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_poly_compress_d5_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_poly_decompress_d10_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_poly_decompress_d11_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_poly_decompress_d4_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_poly_decompress_d5_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_poly_mulcache_compute_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_polyvec_basemul_acc_montgomery_cached_k2_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_polyvec_basemul_acc_montgomery_cached_k3_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_polyvec_basemul_acc_montgomery_cached_k4_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_reduce_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_rej_uniform_avx2_asm.S
+- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/mlkem_tomont_avx2_asm.S
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/rej_uniform_table.c
-- ext/pqcrypto/vendor/mlkem-native/mlkem/src/native/x86_64/src/tomont_avx2_asm.S
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/params.h
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/poly.c
 - ext/pqcrypto/vendor/mlkem-native/mlkem/src/poly.h
@@ -348,7 +350,6 @@ metadata:
   homepage_uri: https://github.com/roman-haidarov/pq_crypto
   source_code_uri: https://github.com/roman-haidarov/pq_crypto/tree/main
   changelog_uri: https://github.com/roman-haidarov/pq_crypto/blob/main/CHANGELOG.md
-post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -363,8 +364,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.22
-signing_key:
+rubygems_version: 3.6.7
 specification_version: 4
 summary: Primitive-first post-quantum cryptography for Ruby
 test_files: []

data/ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/poly_chknorm_avx2.c

@@ -1,52 +0,0 @@
-/*
- * Copyright (c) The mldsa-native project authors
- * SPDX-License-Identifier: Apache-2.0 OR ISC OR MIT
- */
-
-/* References
- * ==========
- *
- * - [REF_AVX2]
- *   CRYSTALS-Dilithium optimized AVX2 implementation
- *   Bai, Ducas, Kiltz, Lepoint, Lyubashevsky, Schwabe, Seiler, Stehlé
- *   https://github.com/pq-crystals/dilithium/tree/master/avx2
- */
-
-/*
- * This file is derived from the public domain
- * AVX2 Dilithium implementation @[REF_AVX2].
- */
-
-#include "../../../common.h"
-
-#if defined(MLD_ARITH_BACKEND_X86_64_DEFAULT) && \
-    !defined(MLD_CONFIG_MULTILEVEL_NO_SHARED)
-
-#include <immintrin.h>
-#include "arith_native_x86_64.h"
-
-int mld_poly_chknorm_avx2(const int32_t *a, int32_t B)
-{
-  unsigned int i;
-  __m256i f, t;
-  const __m256i bound = _mm256_set1_epi32(B - 1);
-
-  t = _mm256_setzero_si256();
-  for (i = 0; i < MLDSA_N / 8; i++)
-  {
-    f = _mm256_load_si256((const __m256i *)&a[8 * i]);
-    f = _mm256_abs_epi32(f);
-    f = _mm256_cmpgt_epi32(f, bound);
-    t = _mm256_or_si256(t, f);
-  }
-
-  return 1 - _mm256_testz_si256(t, t);
-}
-
-#else /* MLD_ARITH_BACKEND_X86_64_DEFAULT && !MLD_CONFIG_MULTILEVEL_NO_SHARED \
-       */
-
-MLD_EMPTY_CU(avx2_poly_chknorm)
-
-#endif /* !(MLD_ARITH_BACKEND_X86_64_DEFAULT && \
-          !MLD_CONFIG_MULTILEVEL_NO_SHARED) */

data/ext/pqcrypto/vendor/mldsa-native/mldsa/src/native/x86_64/src/poly_decompose_32_avx2.c

@@ -1,157 +0,0 @@
-/*
- * Copyright (c) The mldsa-native project authors
- * SPDX-License-Identifier: Apache-2.0 OR ISC OR MIT
- */
-
-/* References
- * ==========
- *
- * - [REF_AVX2]
- *   CRYSTALS-Dilithium optimized AVX2 implementation
- *   Bai, Ducas, Kiltz, Lepoint, Lyubashevsky, Schwabe, Seiler, Stehlé
- *   https://github.com/pq-crystals/dilithium/tree/master/avx2
- */
-
-/*
- * This file is derived from the public domain
- * AVX2 Dilithium implementation @[REF_AVX2].
- *
- * The algorithm for Decompose(r) (more specifically the handling for the
- * wrap-around cases) are modified. See the "Reference" section in the comments
- * below for a more detailed comparison.
- */
-
-#include "../../../common.h"
-
-#if defined(MLD_ARITH_BACKEND_X86_64_DEFAULT) &&   \
-    !defined(MLD_CONFIG_NO_SIGN_API) &&            \
-    !defined(MLD_CONFIG_MULTILEVEL_NO_SHARED) &&   \
-    (defined(MLD_CONFIG_MULTILEVEL_WITH_SHARED) || \
-     (MLD_CONFIG_PARAMETER_SET == 65 || MLD_CONFIG_PARAMETER_SET == 87))
-
-#include <immintrin.h>
-#include "arith_native_x86_64.h"
-#include "consts.h"
-
-/*
- * Reference: The reference implementation has the input polynomial as a
- *            separate argument that may be aliased with either of the outputs.
- *            Removing the aliasing eases CBMC proofs.
- */
-void mld_poly_decompose_32_avx2(int32_t *a1, int32_t *a0)
-{
-  unsigned int i;
-  __m256i f, f0, f1, t;
-  const __m256i q_bound = _mm256_set1_epi32(31 * ((MLDSA_Q - 1) / 32));
-  /* check-magic: 1025 == floor(2**22 / 4092) */
-  const __m256i v = _mm256_set1_epi32(1025);
-  const __m256i alpha = _mm256_set1_epi32(2 * ((MLDSA_Q - 1) / 32));
-  const __m256i off = _mm256_set1_epi32(127);
-  const __m256i shift = _mm256_set1_epi32(512);
-
-  for (i = 0; i < MLDSA_N / 8; i++)
-  {
-    f = _mm256_load_si256((__m256i *)&a0[8 * i]);
-
-    /* check-magic: 4092 == intdiv(2 * intdiv(MLDSA_Q - 1, 32), 128) */
-    /*
-     * Compute f1 = round-(f / (2*GAMMA2)) as round-(f / (128B)) =
-     * round-(ceil(f / 128) / B) where B = 2*GAMMA2 / 128 = 4092. See
-     * mld_decompose() in mldsa/src/rounding.h for more details.
-     *
-     * range: 0 <= f <= Q-1 = 32*GAMMA2 = 16*128*B
-     */
-
-    /* Compute f1' = ceil(f / 128) as floor((f + 127) / 2^7) */
-    f1 = _mm256_add_epi32(f, off);
-    f1 = _mm256_srli_epi32(f1, 7);
-    /*
-     * range: 0 <= f1' <= (Q-1)/128 = 16B
-     *
-     * Also, f1' <= (Q-1)/128 = 2^16 - 2^6 < 2^16 ensures that the odd-index
-     * 16-bit lanes are all 0, so no bits will be dropped in the input of the
-     * _mm256_mulhi_epu16() below.
-     */
-
-    /*
-     * Compute f1 = round-(f1' / B) ≈ round(f1' * 1025 / 2^22). This is exact
-     * for 0 <= f1' < 2^16. See mld_decompose() in mldsa/src/rounding.h for the
-     * proof, and proofs/isabelle/compress for a formalization of the argument.
-     *
-     * round(f1' * 1025 / 2^22) is in turn computed in 2 steps as
-     * round(floor(f1' * 1025 / 2^16) / 2^6). The mulhi computes f1'' =
-     * floor(f1' * 1025 / 2^16). As for the next step f1 = round(f1'' / 2^6),
-     * because AVX2 doesn't have rounding right-shift (e.g. urshr in Neon), we
-     * simulate it using mulhrs with a power of 2, in this case mulhrs(f1'',
-     * 2^9) = round(f1'' * 2^9 / 2^15). (Note that the denominator is 2^15,
-     * not 2^16 as in mulhi.)
-     */
-    f1 = _mm256_mulhi_epu16(f1, v);
-    /*
-     * range: 0 <= f1''  = floor(f1' * 1025 / 2^16)
-     *                  <= f1' * 1025 / 2^16
-     *                   < 2^16 * 1025 / 2^16 = 1025
-     *
-     * Because 0 <= f1'' < 2^15, the multiplication in mulhrs is unsigned, that
-     * is, no erroneous sign-extension occurs.
-     */
-    f1 = _mm256_mulhrs_epi16(f1, shift);
-    /*
-     * range: 0 <= f1 = round-(f1' / B) <= round-(16B / B) = 16
-     *
-     * Note that the odd-index 16-bit lanes are still all 0 right now, so
-     * reinterpreting f1 as 8 lanes of int32_t (as done in the following) does
-     * not affect its value.
-     */
-
-    /*
-     * If f1 = 16, i.e. f > 31*GAMMA2, proceed as if f' = f - Q was given
-     * instead. (For f = 31*GAMMA2 + 1 thus f' = -GAMMA2, we still round it to 0
-     * like other "wrapped around" cases.)
-     *
-     * Reference: They handle wrap-around in a somewhat convoluted way. Most
-     *            notably, they compute remainder f0 with quotient f1 that's
-     *            already wrapped around, so is off by q (instead of by 1) from
-     *            what it should be ultimately. They detect the need for
-     *            correction by checking if f0 is abnormally large.
-     *
-     *            Our approach is closer to Algorithm 36 in the specification,
-     *            in that we compute f0 normally and correct f1, f0 in the way
-     *            they prescribed. The only real difference is that we check for
-     *            wrap-around by examining f directly, instead of some other
-     *            intermediates computed from it.
-     */
-
-    /* Check for wrap-around */
-    t = _mm256_cmpgt_epi32(f, q_bound);
-
-    /* Compute remainder f0 */
-    f0 = _mm256_mullo_epi32(f1, alpha);
-    f0 = _mm256_sub_epi32(f, f0);
-    /*
-     * range: -GAMMA2 < f0 <= GAMMA2
-     *
-     * This holds since f1 = round-(f / (2*GAMMA2)) was computed exactly.
-     */
-
-    /* If wrap-around is required, set f1 = 0 and f0 -= 1 */
-    f1 = _mm256_andnot_si256(t, f1);
-    f0 = _mm256_add_epi32(f0, t);
-    /* range: 0 <= f1 <= 15, -GAMMA2 <= f0 <= GAMMA2 */
-
-    _mm256_store_si256((__m256i *)&a1[8 * i], f1);
-    _mm256_store_si256((__m256i *)&a0[8 * i], f0);
-  }
-}
-
-#else /* MLD_ARITH_BACKEND_X86_64_DEFAULT && !MLD_CONFIG_NO_SIGN_API &&       \
-         !MLD_CONFIG_MULTILEVEL_NO_SHARED &&                                  \
-         (MLD_CONFIG_MULTILEVEL_WITH_SHARED || MLD_CONFIG_PARAMETER_SET == 65 \
-         || MLD_CONFIG_PARAMETER_SET == 87) */
-
-MLD_EMPTY_CU(avx2_poly_decompose_32)
-
-#endif /* !(MLD_ARITH_BACKEND_X86_64_DEFAULT && !MLD_CONFIG_NO_SIGN_API &&     \
-          !MLD_CONFIG_MULTILEVEL_NO_SHARED &&                                  \
-          (MLD_CONFIG_MULTILEVEL_WITH_SHARED || MLD_CONFIG_PARAMETER_SET == 65 \
-          || MLD_CONFIG_PARAMETER_SET == 87)) */