func crypto/internal/mlkem768.nttMul

5 uses

	crypto/internal/mlkem768 (current package)
		mlkem768.go#L213: 			t[i] = polyAdd(t[i], nttMul(A[i*k+j], s[j]))
		mlkem768.go#L341: 			u[i] = polyAdd(u[i], inverseNTT(nttMul(ex.A[j*k+i], r[j])))
		mlkem768.go#L349: 		vNTT = polyAdd(vNTT, nttMul(ex.t[i], r[i]))
		mlkem768.go#L436: 		mask = polyAdd(mask, nttMul(dx.s[i], ntt(u[i])))
		mlkem768.go#L766: func nttMul(f, g nttElement) nttElement {