ekPKE[encodingSize12:] } copy(ek.ρ[:], ekPKE) for i := byte(0); i < k; i++ { for j := byte(0); j < k; j++ { ek.a[i*k+j] = sampleNTT(ek.ρ[:], j, i) } } return ek, nil } // pkeEncrypt encrypt a plaintext message. // // It implements K-PKE.Encrypt according to FIPS 203, Algorithm 14, although the // computation of t and AT is done in parseEK. func pkeEncrypt(cc *[CiphertextSize768]byte, ex *encryptionKey, m *[messageSize]byte, rnd []byte) []byte { var N byte r, e1 := make([]nttElement, k), make([]ringElement, k)...