error) { if len(ciphertext) != CiphertextSize1024 { return nil, errors.New("mlkem: invalid ciphertext length") } c := (*[CiphertextSize1024]byte)(ciphertext) // Note that the hash check (step 3 of the decapsulation input check from // FIPS 203, Section 7.3) is foregone as a DecapsulationKey is always // validly generated by ML-KEM.KeyGen_internal. return kemDecaps1024(dk, c), nil } // kemDecaps1024 produces a shared key from a ciphertext. // // It implements ML-KEM.Decaps_internal according to FIPS 203,...