FallenSigh 8ed4d59546 feat(enc): Encaps E3 - y_hat = NTT(y) in place ...

ST_ENC_N reuses the ST_N forward-NTT datapath (mode=0, read-ahead load,
in-place writeback to bank_se). Slot count parameterized: KeyGen 2K (s,e),
Encaps K (y only; e1/e2 stay time-domain) via n_slot_max. bse rd/wr muxes
and the C->N arming extended for ST_ENC_N.

Verified (K=2 c0) y_hat[0..1] == ml-kem-r golden; E0/E1/E2 still pass
(E2 y check dropped since NTT overwrites y in place -> covered by E3);
K=3/4 run through E3 without timeout.

2026-06-29 02:01:37 +08:00

..

vectors

feat(enc): Encaps E2 - sample y/e1/e2 (CBD eta1/eta2, r seed)

2026-06-29 01:55:47 +08:00

gen_encaps_vectors.py

feat(enc): Encaps E0 - op_i/msg_i/ek-load scaffold + H(ek)+G(m||H(ek))

2026-06-29 01:00:47 +08:00

gen_vectors.py

feat(tb): add KAT testbench for mlkem_top (ML-KEM-512)

2026-06-27 01:07:34 +08:00

tb_mlkem_enc_katK_xsim.v

feat(enc): Encaps E3 - y_hat = NTT(y) in place

2026-06-29 02:01:37 +08:00

tb_mlkem_kg_2a_xsim.v

feat(mlkem_top): KeyGen stages 2a-2c (G, SampleNTT A_hat, CBD s/e)

2026-06-28 01:41:44 +08:00

tb_mlkem_kg_2c_xsim.v

feat(mlkem_top): KeyGen stages 2a-2c (G, SampleNTT A_hat, CBD s/e)

2026-06-28 01:41:44 +08:00

tb_mlkem_kg_2d_xsim.v

feat(mlkem_top): KeyGen stage 2d (forward NTT of s/e)

2026-06-28 01:47:54 +08:00

tb_mlkem_kg_2e_xsim.v

feat(mlkem_top): KeyGen stage 2e (matrix accumulate t_hat)

2026-06-28 01:53:23 +08:00

tb_mlkem_kg_2f_xsim.v

feat(mlkem_top): KeyGen stage 2f (byteEncode12 -> ek, dk_pke)

2026-06-28 02:03:03 +08:00

tb_mlkem_kg_kat_xsim.v

feat(mlkem_top): KeyGen stage 4 - H(ek) + full dk, end-to-end KAT pass

2026-06-28 02:18:52 +08:00

tb_mlkem_kg_katK_xsim.v

feat(enc): Encaps E0 - op_i/msg_i/ek-load scaffold + H(ek)+G(m||H(ek))

2026-06-29 01:00:47 +08:00

tb_mlkem_kg_katN_xsim.v

test(mlkem_top): KeyGen verified vs NIST KAT count=0..4

2026-06-28 02:23:18 +08:00

xcheck_mlkemr.py

test(top): add ml-kem-r cross-validation script (xcheck_mlkemr.py)

2026-06-28 23:54:08 +08:00

xsim_run.tcl

refactor(kg): share a single keccak_core across G/H, SampleNTT, CBD (4->1)

2026-06-28 15:35:55 +08:00