t.Errorf("Key hash mismatch:\n got: %X\n want: %X", keyHashGot, keyHashWant) } pub, err := tc.newPublicKey(pk) if err != nil { t.Fatalf("NewPublicKey: %v", err) } if !pub.Equal(priv.PublicKey()) { t.Errorf("Parsed public key not equal to original") } if *pub != *priv.PublicKey() { t.Errorf("Parsed public key not identical to original") } // The table provides a Sign_internal input (not actually formatted // like one), which is part of the pre-image of μ. M := fromHex(tc.msg) H := sha3.NewShake256()...

[]byte) []byte { for i := range ek.t { b = polyByteEncode(b, ek.t[i]) } b = append(b, ek.ρ[:]...) return b } // encryptionKey1024 is the parsed and expanded form of a PKE encryption key. type encryptionKey1024 struct { t [k1024]nttElement // ByteDecode₁₂(ek[:384k]) a [k1024 * k1024]nttElement // A[i*k+j] = sampleNTT(ρ, j, i) } // decryptionKey1024 is the parsed and expanded form of a PKE decryption key. type decryptionKey1024 struct { s [k1024]nttElement // ByteDecode₁₂(dk[:decryptionKey1024Siz])...

See [CVE-2021-32677](https://github.com/tiangolo/fastapi/security/advisories/GHSA-8h2j-cgx8-6xv7) for more details.