*DecapsulationKey1024) error { ek := dk.EncapsulationKey() K, c := ek.Encapsulate() K1, err := dk.Decapsulate(c) if err != nil { return err } if subtle.ConstantTimeCompare(K, K1) != 1 { return errors.New("mlkem: PCT failed") } return nil } // Encapsulate generates a shared key and an associated ciphertext from an // encapsulation key, drawing random bytes from a DRBG. // // The shared key must be kept secret. func (ek *EncapsulationKey1024) Encapsulate() (sharedKey, ciphertext []byte) { // The actual logic is...