parameters) []byte { ω, k := p.ω, p.k out, y := sliceForAppend(buf, ω+k) var idx byte for i := range k { for j := range n { if h[i][j] != 0 { y[idx] = byte(j) idx++ } } y[ω+i] = idx } return out } func hintDecode(y []byte, h [][n]byte, p parameters) error { ω, k := p.ω, p.k if len(y) != ω+k { return errors.New("mldsa: internal error: invalid signature hint length") } var idx byte for i := range k { limit := y[ω+i] if limit < idx || limit > byte(ω) { return errInvalidSignatureH } first := idx for idx <...

#define Y2L V8 #define Y2H V9 #define Z2L V10 #define Z2H V11 #define ONE V18 #define IDX V19 #define SEL1 V20 #define SEL2 V21 // func p256Select(point *p256Point, table *p256Table, idx int) TEXT ·p256Select(SB), NOSPLIT, $0-24 MOVD res+0(FP), P3ptr MOVD table+8(FP), P1ptr MOVD $16, R16 MOVD $32, R17 MOVD $48, R18 MOVD $64, R19 MOVD $80, R20 LXVDSX (R1)(R18), SEL1 // VLREPG idx+32(FP), SEL1 VSPLTB $7, SEL1, IDX // splat byte VSPLTISB $1, ONE // VREPIB $1, ONE VSPLTISB $1, SEL2 // VREPIB $1, SEL2...