FallenSigh 038ba8ecf2 fix(kg): byte-reverse d_reg before sha3_chain to match FIPS 203 ...

RTL was feeding d bytes in reversed order to SHA3-512,
causing G(d) to produce wrong rho/sigma. Fix: add d_rev
wire with byte reversal, connect to sha3_chain_top_shared.

2026-06-27 03:01:34 +08:00

66 KiB

Raw Blame History

View Raw