pub fn masked_ntt(m: &mut MaskedPoly)Expand description
Apply the forward NTT to each share of a MaskedPoly independently.
Exploits the linearity of the NTT: NTT(s0 + s1) = NTT(s0) + NTT(s1).
Each share is transformed independently so the masking invariant is preserved.