This repository has been archived on 2026-08-21 . You can view files and clone it. You cannot open issues or pull requests or push a commit.
be2e54c8abca7d6d71a3109d992b7be3b7ce3a11
B2 (ping-pong poly_mul + decoupled MAC load) doubled the 256x12 coeff register file (mem_A/B -> 4 arrays) costing ~7k LUT for only ~2.8% Encaps latency (K=2) — the worst area/latency ratio of the optimization set. Revert restores single-buffer poly_mul and serial MAC. B1 (compress streaming) and R1 (dual-butterfly NTT) are kept. Verified byte-exact vs NIST KAT: Encaps 9/9, Decaps 9/9, KeyGen, hello end-to-end, poly_mul standalone TB 11/11 — all PASS. ENC_U K=2 4177->4689, ENC_V 2089->2345 (B2's hidden load reappears).
Description
No description provided
Languages
Verilog
46.5%
C
27.8%
Assembly
20.5%
SystemVerilog
3.3%
Python
0.7%
Other
1.2%