Skip to main content

masked_pointwise_mul_public

quantica::ml_dsa::masked

Function masked_pointwise_mul_public 

Source 
pub fn masked_pointwise_mul_public(
    masked: &MaskedPoly,
    c_hat: &[i32; 256],
) -> MaskedPoly
Expand description

Pointwise multiply a masked polynomial by a public polynomial in NTT domain. Returns a fresh MaskedPoly holding the product.

c_hat (the per-iteration challenge polynomial in NTT form) is public — the verifier recomputes it, and any side-channel observation of it does not help an attacker recover the secret shares.