ReportError reports an error if got is different from want.

Add sets the receiver to x + y, and returns the receiver.

Mul sets the receiver to x * y, and returns the receiver.

CheckNoErr fails if err !=nil. Print msg as an error message.

Sub sets the receiver to x - y, and returns the receiver.

NewShake256 creates a new SHAKE256 variable-output-length ShakeHash. Its generic security strength is 256 bits against all attacks if at least 64 byte

IsEqual returns true if the receiver is equal to x.

CheckOk fails the test if result == false.

Neg sets the receiver to -x, and returns the receiver.

Reset restores the XOF to its initial state and discards all data appended by Write.

Set the element to the neutral multiplicative element.

Set the receiver to x, and returns the receiver.

BytesLe2BigInt converts a little-endian slice x into a big-endian math/big.Int.

Bytes serializes a G1 element in uncompressed form.

Size returns the number of bytes to encode a field element.

Sqr calculates z = x * x.

NewPublicKey initializes public key. Usage of this function guarantees that the object is correctly initialized. Deprecated: not cryptographically se

NewPrivateKey initializes private key. Usage of this function guarantees that the object is correctly initialized. Deprecated: not cryptographically

Params returns parameters for the group Creates an element of the group set to the identity of the group.

Sum applies padding to the hash state and then squeezes out the desired number of output bytes.

NTT calculates the number theoretic transform of the vector.

IsZero returns true if the receiver is equal to zero.

Creates a signature using the PrivateKey on the given message and returns the signature. opts are additional options which can be nil. Panics if key

Generates public key.

SetString reconstructs a Fp from a numeric string from 0 to FpOrder-1.

Generates random private key for SIDH or SIKE. Generated value is formed as little-endian integer from key-space <2^(e2-1)..2^e2 - 1> for KeyVariant_A

SetUint64 sets the receiver to x, and returns the receiver.

CheckIsErr fails if err ==nil. Print msg as an error message.

InvNTT calculates the inverse number theoretic transform on values.

Creates a scalar of the group set to zero.

Reduce each of the coefficients to <q.

returns the seed if retained, otherwise nil

AddAssing calculates z = z + x.

Exp calculates z=x^n, where n is the exponent in big-endian order.

GenerateKey creates a new key-pair.

Inv sets the receiver to 1/x, and returns the receiver.

Name of the scheme

New256 creates a new SHA3-256 hash. Its generic security strength is 256 bits against preimage attacks, and 128 bits against collision attacks.

Like os.ReadFile, but gunzip first.

Returns the shared key encapsulated in ciphertext ct for the private key sk.

NewShake128 creates a new SHAKE128 variable-output-length ShakeHash. Its generic security strength is 128 bits against all attacks if at least 32 byte

RandomScalar creates a scalar chosen at random (using randomness from rnd) from the set of group scalars. Use crypto/rand.Reader as a cryptographicall

Sets p to the polynomial whose coefficients are the pointwise multiplication of those of a and b. The coefficients of p are bounded by 2q. Assumes a

Permute performs the four parallel Keccak-f[1600]s interleaved on the slice returned from Initialize().

Size of encapsulated keys.

Initialize the state and returns the buffer on which the four permutations will act: a uint64 slice of length 100. The first permutation will act on

New512 creates a new SHA3-512 hash. Its generic security strength is 512 bits against preimage attacks, and 256 bits against collision attacks.

Open takes a ciphertext and associated data to recover, if successful, the plaintext. The nonce is handled by the Opener and incremented after each ca

Returns the scheme for this public key

add sets m to a+b.

Encapsulate generates a shared key ss for the public key and encapsulates it into a ciphertext ct.

Next return an slice of size n and advances the pointer.

Seal takes a plaintext and associated data to produce a ciphertext. The nonce is handled by the Sealer and incremented after each call.

set sets m to a.

IsIdentity returns true if the receiver is the identity element of the group.

fp384Mul accepts non-reduced operands and always returns a reduced c. go:noescape

Export takes a context string exporterContext and a desired length (in bytes), and produces a secret derived from the internal exporter secret using t

GenerateKeyPair creates a new key pair.

Mul calculates z = x * y.

Size of packed public keys.

RandomElement creates an element chosen at random (using randomness from rnd) from the set of group elements. Use crypto/rand.Reader as a cryptographi

ScalarMult calculates g = kP.

SubAssign calculates z = z - x.

Write absorbs more data into the hash's state. It produces an error if more data is written to the ShakeHash after writing

mul sets m to a*b.

Take a uniformly distributed sample, and produce a sample in the FrodoKEM discrete Gaussian distribution using inverse transform sampling.

CheckPanic returns true if call to function 'f' caused panic.

Copy returns a new scalar equal to the receiver.

Computes a SIDH shared secret. Function requires that pub has different KeyVariant than prv. Length of returned output is 2*ceil(log_2 P)/8), where P