copy(ek.ρ[:], ekPKE) for i := byte(0); i < k1024; i++ { for j := byte(0); j < k1024; j++ { ek.a[i*k1024+j] = sampleNTT(ek.ρ[:], j, i) } } return ek, nil } // pkeEncrypt1024 encrypt a plaintext message. // // It implements K-PKE.Encrypt according to FIPS 203, Algorithm 14, although the // computation of t and AT is done in parseEK1024. func pkeEncrypt1024(cc *[CiphertextSize1024]byte, ex *encryptionKey1024, m *[messageSize]byte, rnd []byte) []byte { var N byte r, e1 := make([]nttElement, k1024), make([]ringElement,...