! __.PKGDEF 0 0 0 644 7925 ` go object linux amd64 go1.23.2 GOAMD64=v1 X:regabiwrappers,regabiargs,coverageredesign build id "5XlXeF_JwgWsMorbenG4/OuqSPjVLZl_mxupK4kJJ" $$B u>Tj%9DSYnz5:JQbj &*5BF[_lp} ',9?Y\^s&.69<LSZaj -.:DERSXhx|}$4NUosU(8s  / 9 M Z g z   ) : G Q m / O h {   B h {  $ = C K T ] e m u }  FNU\ #)/6<BJ HNTZ`flklxM\1i%/;IUcdemu} >mlkem768crypto/randrandioerrorsunsafeinternal/reflectlitereflectliteinternal/goarchgoarchinternal/unsafeheaderunsafeheaderinternal/abiabiruntimeinternal/cpucpuinternal/runtime/atomicatomicruntime/internal/mathmathruntime/internal/syssysinternal/goosgoosinternal/goexperimentgoexperimentinternal/coverage/rtcovrtcovinternal/bytealgbytealginternal/godebugsgodebugsinternal/profilerecordprofilerecordinternal/runtime/syscallsyscallinternal/stringslitestringsliteinternal/runtime/exithookexithookinternal/chacha8randchacha8randinternal/byteorderbyteordersyncsync/atomicinternal/raceraceinternal/syscall/unixunixinternal/itoaitoainternal/asanasaninternal/msanmsaninternal/oserroroserrorcrypto/internal/boringboringcryptohashstrconvmath/bitsbitsunicode/utf8utf8crypto/ciphercipherbytesunicodecrypto/internal/aliasaliascrypto/subtlesubtlecrypto/internal/boring/sigsigosinternal/filepathlitefilepathliteio/fsfstimeinternal/godebuggodebuginternal/bisectbisectpathslicescmpiterinternal/testlogtestloginternal/pollpollinternal/syscall/execenvexecenvcrypto/internal/randutilrandutilmath/bigbigfmtinternal/fmtsortfmtsortreflectstringsmath/randvendor/golang.org/x/crypto/sha3sha3encoding/binarybinaryvendor/golang.org/x/sys/cpucrypto/internal/mlkem768$GOROOT/src/crypto/internal/mlkem768/mlkem768.goCiphertextSizedkbuiltinbyteencryptionKeytfieldElementnttElementAdecryptionKeysBytesEncapsulationKeyDecapsulationKeyesc:bcopyciphertextsharedKeyerrerrorDecapsulateesc:DecapsulationKeySizeencapsulationKeyEncapsulateccencapsulateesc:EncapsulationKeySizeGenerateKeygenerateKeyesc:decapsulationKeyNewKeyFromExtendedEncodingdkBytesnewKeyFromExtendedEncodingseedNewKeyFromSeednewKeyFromSeedSeedSizeSharedKeySize(*DecapsulationKey).Bytes(*DecapsulationKey).EncapsulationKey       r       s-Cr "/2<=               ! "#"$%$&'&() (*+*,-,. .//010232%  !% 454676898:;:<=#).$<>$%>??@&'(@ 'ABACDC EF*,-EG(+GHHIJIKLKMNMO016 9:2;O PQ16P RS2!(56R  T3 T UV4UWX WY(YZ78'Z[[\ \]^] _`2 _   abacdcef%' >&A*Be   g6%(?/@&g  hi7@6hj8%+(& j  k(+k  l&3l mn$#D-Em  op&@6oq /A%qvvtFwx{z}FF ux}JKLy| ab     ~g    &()!,FRd '$u./!rr)r< u456!!7H[ u;<=!+9L@ u !(<N  uIQQQ%QYY Y0 Y`  fB% "#!,8J &()!,FRd A+!lll(lu./!rrr)r<r01!!;N u456!!7H[78!#6 u;<=!+9LDC@lbfdZXVTjhPLM M  uRR S S  S S T T U uZZ [ [  [ [[ \ \ ] $% *")!     u,-/!nn nn oo op u2306!   #  u9:7=!    6@z2X $$ _go_.o 0 0 0 644 234183 ` go object linux amd64 go1.23.2 GOAMD64=v1 X:regabiwrappers,regabiargs,coverageredesign build id "5XlXeF_JwgWsMorbenG4/OuqSPjVLZl_mxupK4kJJ" ! go120ld6@z2X~AABnBY#Z{-q77crypto/randcrypto/subtleerrorsinternal/byteordervendor/golang.org/x/crypto/sha3hashcrypto/internal/mlkem768.initgclocals·g2BeySu+wFnoycgXfElmcg==crypto/internal/mlkem768.(*DecapsulationKey).Bytestype:[2400]uint8gclocals·ZzMiPAiVBg7DJ6dh/CjSag==gclocals·VtCL4RdUwCqwXEPeyJllRA==crypto/internal/mlkem768.(*DecapsulationKey).Bytes.arginfo1crypto/internal/mlkem768.(*DecapsulationKey).Bytes.argliveinfo$GOROOT/src/crypto/internal/mlkem768/mlkem768.gotype:[]uint8go:info.*crypto/internal/mlkem768.DecapsulationKeygo:info.[]uint8go:info.*[2400]uint8crypto/internal/mlkem768.(*DecapsulationKey).EncapsulationKeytype:[1184]uint8crypto/internal/mlkem768.(*DecapsulationKey).EncapsulationKey.arginfo1crypto/internal/mlkem768.(*DecapsulationKey).EncapsulationKey.argliveinfogo:info.*[1184]uint8crypto/internal/mlkem768.GenerateKeytype:crypto/internal/mlkem768.DecapsulationKeycrypto/internal/mlkem768.generateKeytype:*crypto/internal/mlkem768.DecapsulationKeygo:info.errortype:*errors.errorStringtype:[32]uint8crypto/rand.Readgo:string."mlkem768: crypto/rand Read failed: "type:errors.errorStringruntime.gcWriteBarrier1go:itab.*errors.errorString,errorcrypto/internal/mlkem768.kemKeyGengclocals·o3Kun4xYxg5C876ga0QjuQ==gclocals·1xfQtbdW+CE3a/qGOaL67Q==crypto/internal/mlkem768.generateKey.arginfo1crypto/internal/mlkem768.generateKey.argliveinfo$GOROOT/src/errors/errors.goerrors.Newtype:intgo:info.*[32]uint8go:info.errors.New$abstractcrypto/internal/mlkem768.NewKeyFromSeedcrypto/internal/mlkem768.newKeyFromSeedgclocals·wgcWObbY2HYnK2SU/U22lA==gclocals·J5F+7Qw7O7ve2QcWC7DpeQ==crypto/internal/mlkem768.NewKeyFromSeed.arginfo1crypto/internal/mlkem768.NewKeyFromSeed.argliveinfogo:string."mlkem768: invalid seed length"gclocals·TjPuuCwdlCpTaRQGRKTrYw==crypto/internal/mlkem768.newKeyFromSeed.arginfo1crypto/internal/mlkem768.newKeyFromSeed.argliveinfocrypto/internal/mlkem768.NewKeyFromExtendedEncodingcrypto/internal/mlkem768.newKeyFromExtendedEncodingcrypto/internal/mlkem768.NewKeyFromExtendedEncoding.arginfo1crypto/internal/mlkem768.NewKeyFromExtendedEncoding.argliveinfocrypto/internal/mlkem768.parseDKcrypto/internal/mlkem768.parseEKgo:string."mlkem768: invalid decapsulation key length"gclocals·3t8WlE+CEPpgnWbvvNfnSA==gclocals·ykHN0vawYuq1dUW4zEe2gA==crypto/internal/mlkem768.newKeyFromExtendedEncoding.arginfo1crypto/internal/mlkem768.newKeyFromExtendedEncoding.argliveinfotype:*vendor/golang.org/x/crypto/sha3.statevendor/golang.org/x/crypto/sha3.Sum512crypto/internal/mlkem768.samplePolyCBDcrypto/internal/mlkem768.nttcrypto/internal/mlkem768..dict.polyByteEncode[crypto/internal/mlkem768.nttElement]crypto/internal/mlkem768.polyByteEncode[go.shape.[256]crypto/internal/mlkem768.fieldElement]vendor/golang.org/x/crypto/sha3.(*state).Writevendor/golang.org/x/crypto/sha3.(*state).Sumcrypto/internal/mlkem768..stmp_0runtime.panicSliceBcrypto/internal/mlkem768.nttMulruntime.panicIndexcrypto/internal/mlkem768.sampleNTTgclocals·JPuCd7pWfcuA3f+9jUMrqw==gclocals·2lWR2SNhCP2ki4j0UftFLw==crypto/internal/mlkem768.kemKeyGen.arginfo1crypto/internal/mlkem768.kemKeyGen.argliveinfo$GOROOT/src/vendor/golang.org/x/crypto/sha3/hashes.go$GOROOT/src/vendor/golang.org/x/crypto/sha3/hashes_noasm.govendor/golang.org/x/crypto/sha3.New256vendor/golang.org/x/crypto/sha3.new256vendor/golang.org/x/crypto/sha3.new256Genericcrypto/internal/mlkem768.polyAdd[go.shape.[256]crypto/internal/mlkem768.fieldElement]crypto/internal/mlkem768.fieldAddcrypto/internal/mlkem768.fieldReduceOncetype:*crypto/internal/mlkem768.nttElementtype:[3]crypto/internal/mlkem768.nttElementtype:[64]uint8type:crypto/internal/mlkem768.nttElementtype:crypto/internal/mlkem768.ringElementtype:vendor/golang.org/x/crypto/sha3.statego:info.uint8go:info.[64]uint8go:info.intgo:info.vendor/golang.org/x/crypto/sha3.New256$abstractgo:info.vendor/golang.org/x/crypto/sha3.new256$abstractgo:info.vendor/golang.org/x/crypto/sha3.new256Generic$abstractgo:info.crypto/internal/mlkem768.polyAdd[go.shape.[256]crypto/internal/mlkem768.fieldElement]$abstractgo:info.crypto/internal/mlkem768.fieldAdd$abstractgo:info.crypto/internal/mlkem768.fieldReduceOnce$abstractcrypto/internal/mlkem768.Encapsulatetype:[1088]uint8crypto/internal/mlkem768.encapsulatecrypto/internal/mlkem768.Encapsulate.arginfo1crypto/internal/mlkem768.Encapsulate.argliveinfogo:info.*[1088]uint8crypto/internal/mlkem768.kemEncapsgo:string."mlkem768: invalid encapsulation key length"gclocals·7JQqrp1B6U3j9pgIVYhRmQ==gclocals·dWfovk9haRLV9HOdqHCp5w==crypto/internal/mlkem768.encapsulate.arginfo1crypto/internal/mlkem768.encapsulate.argliveinfovendor/golang.org/x/crypto/sha3.Sum256crypto/internal/mlkem768.pkeEncryptruntime.panicSliceAcapgclocals·IcyqASvJEECPHJG5+wAYNw==gclocals·ceTFB1uXYcP672IQsTD21w==crypto/internal/mlkem768.kemEncaps.arginfo1crypto/internal/mlkem768.kemEncaps.argliveinfovendor/golang.org/x/crypto/sha3.New512vendor/golang.org/x/crypto/sha3.new512vendor/golang.org/x/crypto/sha3.new512Generictype:crypto/internal/mlkem768.encryptionKeygo:info.crypto/internal/mlkem768.encryptionKeygo:info.[32]uint8go:info.vendor/golang.org/x/crypto/sha3.New512$abstractgo:info.vendor/golang.org/x/crypto/sha3.new512$abstractgo:info.vendor/golang.org/x/crypto/sha3.new512Generic$abstractgo:string."mlkem768: invalid encryption key length"crypto/internal/mlkem768..dict.polyByteDecode[crypto/internal/mlkem768.nttElement]crypto/internal/mlkem768.polyByteDecode[go.shape.[256]crypto/internal/mlkem768.fieldElement]gclocals·foM/pdm/hXseFZbhzZY8iA==gclocals·dGrMWTWIngKGfVYjHi0adA==crypto/internal/mlkem768.parseEK.arginfo1crypto/internal/mlkem768.parseEK.argliveinfotype:go.shape.[256]crypto/internal/mlkem768.fieldElementgo:info.*crypto/internal/mlkem768.encryptionKeycrypto/internal/mlkem768.inverseNTTcrypto/internal/mlkem768.ringCompressAndEncode10crypto/internal/mlkem768.ringCompressAndEncode4gclocals·AwiKyywRydDbH+lWevX5PQ==gclocals·C6hhan23EAgo3FoZXBcLRA==crypto/internal/mlkem768.pkeEncrypt.arginfo1crypto/internal/mlkem768.pkeEncrypt.argliveinfocrypto/internal/mlkem768.ringDecodeAndDecompress1type:*crypto/internal/mlkem768.ringElementtype:[3]crypto/internal/mlkem768.ringElementgo:info.crypto/internal/mlkem768.ringElementgo:info.crypto/internal/mlkem768.nttElementgo:info.crypto/internal/mlkem768.ringDecodeAndDecompress1$abstractcrypto/internal/mlkem768.Decapsulatego:string."mlkem768: invalid ciphertext length"crypto/internal/mlkem768.kemDecapscrypto/internal/mlkem768.Decapsulate.arginfo1crypto/internal/mlkem768.Decapsulate.argliveinfocrypto/internal/mlkem768.pkeDecryptvendor/golang.org/x/crypto/sha3.(*state).Readruntime.panicSliceConvertgclocals·MwY8wudPZ6cnlMI2DzblMg==gclocals·LykYixFUMIj93XjwHv6wyg==crypto/internal/mlkem768.kemDecaps.arginfo1crypto/internal/mlkem768.kemDecaps.argliveinfo$GOROOT/src/vendor/golang.org/x/crypto/sha3/shake.go$GOROOT/src/crypto/subtle/constant_time.go$GOROOT/src/vendor/golang.org/x/crypto/sha3/shake_noasm.govendor/golang.org/x/crypto/sha3.NewShake256vendor/golang.org/x/crypto/sha3.newShake256vendor/golang.org/x/crypto/sha3.newShake256Genericcrypto/subtle.ConstantTimeComparecrypto/subtle.ConstantTimeByteEqcrypto/subtle.ConstantTimeCopygo:info.[1088]uint8go:info.vendor/golang.org/x/crypto/sha3.NewShake256$abstractgo:info.vendor/golang.org/x/crypto/sha3.newShake256$abstractgo:info.vendor/golang.org/x/crypto/sha3.newShake256Generic$abstractgo:info.crypto/subtle.ConstantTimeCompare$abstractgo:info.crypto/subtle.ConstantTimeByteEq$abstractgo:info.crypto/subtle.ConstantTimeCopy$abstractgo:string."mlkem768: invalid decryption key length"crypto/internal/mlkem768.parseDK.arginfo1crypto/internal/mlkem768.parseDK.argliveinfogo:info.*crypto/internal/mlkem768.decryptionKeycrypto/internal/mlkem768.ringDecodeAndDecompress10crypto/internal/mlkem768.ringDecodeAndDecompress4crypto/internal/mlkem768.ringCompressAndEncode1runtime.panicSliceAlencrypto/internal/mlkem768.pkeDecrypt.arginfo1crypto/internal/mlkem768.pkeDecrypt.argliveinfocrypto/internal/mlkem768.polySub[go.shape.[256]crypto/internal/mlkem768.fieldElement]crypto/internal/mlkem768.fieldSubgo:info.crypto/internal/mlkem768.polySub[go.shape.[256]crypto/internal/mlkem768.fieldElement]$abstractgo:info.crypto/internal/mlkem768.fieldSub$abstractcrypto/internal/mlkem768.fieldCheckReducedgo:string."unreduced field element"crypto/internal/mlkem768.fieldCheckReduced.arginfo1crypto/internal/mlkem768.fieldCheckReduced.argliveinfotype:crypto/internal/mlkem768.fieldElementgo:info.crypto/internal/mlkem768.fieldCheckReduced$abstractgo:info.crypto/internal/mlkem768.fieldElementcrypto/internal/mlkem768.fieldReduceOnce.arginfo1crypto/internal/mlkem768.fieldReduceOnce.argliveinfocrypto/internal/mlkem768.fieldAdd.arginfo1crypto/internal/mlkem768.fieldAdd.argliveinfocrypto/internal/mlkem768.fieldSub.arginfo1crypto/internal/mlkem768.fieldSub.argliveinfocrypto/internal/mlkem768.fieldReducecrypto/internal/mlkem768.fieldReduce.arginfo1crypto/internal/mlkem768.fieldReduce.argliveinfogo:info.crypto/internal/mlkem768.fieldReduce$abstractcrypto/internal/mlkem768.fieldMulcrypto/internal/mlkem768.fieldMul.arginfo1crypto/internal/mlkem768.fieldMul.argliveinfogo:info.crypto/internal/mlkem768.fieldMul$abstractcrypto/internal/mlkem768.fieldMulSubcrypto/internal/mlkem768.fieldMulSub.arginfo1crypto/internal/mlkem768.fieldMulSub.argliveinfogo:info.crypto/internal/mlkem768.fieldMulSub$abstractcrypto/internal/mlkem768.fieldAddMulcrypto/internal/mlkem768.fieldAddMul.arginfo1crypto/internal/mlkem768.fieldAddMul.argliveinfogo:info.crypto/internal/mlkem768.fieldAddMul$abstractcrypto/internal/mlkem768.compresscrypto/internal/mlkem768.compress.arginfo1crypto/internal/mlkem768.compress.argliveinfogo:info.crypto/internal/mlkem768.compress$abstractgo:info.uint16crypto/internal/mlkem768.decompresscrypto/internal/mlkem768.decompress.arginfo1crypto/internal/mlkem768.decompress.argliveinfogo:info.crypto/internal/mlkem768.decompress$abstractcrypto/internal/mlkem768.sliceForAppendcrypto/internal/mlkem768.sliceForAppend.arginfo1crypto/internal/mlkem768.sliceForAppend.argliveinfogo:info.crypto/internal/mlkem768.sliceForAppend$abstractgclocals·3/VWHcNdIlllCYEYVB5Fig==crypto/internal/mlkem768.ringCompressAndEncode1.arginfo1crypto/internal/mlkem768.ringDecodeAndDecompress1.arginfo1crypto/internal/mlkem768.ringCompressAndEncode4.arginfo1crypto/internal/mlkem768.ringDecodeAndDecompress4.arginfo1go:info.*[128]uint8crypto/internal/mlkem768.ringCompressAndEncode10.arginfo1go:info.uint64crypto/internal/mlkem768.ringDecodeAndDecompress10.arginfo1go:info.*[320]uint8crypto/internal/mlkem768.samplePolyCBD.arginfo1type:[128]uint8type:[1]uint8crypto/internal/mlkem768.gammascrypto/internal/mlkem768.nttMul.arginfo1crypto/internal/mlkem768.zetascrypto/internal/mlkem768.ntt.arginfo1go:info.[]crypto/internal/mlkem768.fieldElementcrypto/internal/mlkem768.inverseNTT.arginfo1crypto/internal/mlkem768.sampleNTT.arginfo1$GOROOT/src/internal/byteorder/byteorder.govendor/golang.org/x/crypto/sha3.NewShake128vendor/golang.org/x/crypto/sha3.newShake128vendor/golang.org/x/crypto/sha3.newShake128Genericinternal/byteorder.LeUint16type:[24]uint8type:[2]uint8go:info.[24]uint8go:info.vendor/golang.org/x/crypto/sha3.NewShake128$abstractgo:info.vendor/golang.org/x/crypto/sha3.newShake128$abstractgo:info.vendor/golang.org/x/crypto/sha3.newShake128Generic$abstractgo:info.internal/byteorder.LeUint16$abstractgclocals·E8YfRCNazjKp2PFFum6EYA==crypto/internal/mlkem768.polySub[go.shape.[256]crypto/internal/mlkem768.fieldElement].arginfo1type:*[1]uintptrcrypto/internal/mlkem768.polySub[crypto/internal/mlkem768.ringElement]crypto/internal/mlkem768.polySub[crypto/internal/mlkem768.ringElement].arginfo1crypto/internal/mlkem768.polyAdd[go.shape.[256]crypto/internal/mlkem768.fieldElement].arginfo1crypto/internal/mlkem768.polyAdd[crypto/internal/mlkem768.nttElement]crypto/internal/mlkem768.polyAdd[crypto/internal/mlkem768.nttElement].arginfo1go:string."mlkem768: invalid encoding length"go:string."mlkem768: invalid polynomial encoding"gclocals·7JU9+QUiOuajp9U9sg8bDw==crypto/internal/mlkem768.polyByteDecode[go.shape.[256]crypto/internal/mlkem768.fieldElement].arginfo1go:info.go.shape.[256]crypto/internal/mlkem768.fieldElementgo:info.uint32crypto/internal/mlkem768.polyByteDecode[crypto/internal/mlkem768.nttElement]crypto/internal/mlkem768.polyByteDecode[crypto/internal/mlkem768.nttElement].arginfo1crypto/internal/mlkem768.polyAdd[crypto/internal/mlkem768.ringElement]crypto/internal/mlkem768.polyAdd[crypto/internal/mlkem768.ringElement].arginfo1crypto/internal/mlkem768.polyByteEncode[go.shape.[256]crypto/internal/mlkem768.fieldElement].arginfo1crypto/internal/mlkem768.polyByteEncode[crypto/internal/mlkem768.nttElement]crypto/internal/mlkem768.polyByteEncode[crypto/internal/mlkem768.nttElement].arginfo1go:cuinfo.producer.crypto/internal/mlkem768crypto/internal/mlkem768..dict.polyAdd[crypto/internal/mlkem768.nttElement]crypto/internal/mlkem768..dict.polySub[crypto/internal/mlkem768.ringElement]crypto/internal/mlkem768..dict.polyAdd[crypto/internal/mlkem768.ringElement]go:cuinfo.packagename.crypto/internal/mlkem768go:info.stringerrors.(*errorString).Errortype:hash.Hashgo:itab.*vendor/golang.org/x/crypto/sha3.state,hash.Hashvendor/golang.org/x/crypto/sha3.(*state).BlockSizevendor/golang.org/x/crypto/sha3.(*state).Resetvendor/golang.org/x/crypto/sha3.(*state).Sizetype:vendor/golang.org/x/crypto/sha3.ShakeHashgo:itab.*vendor/golang.org/x/crypto/sha3.state,vendor/golang.org/x/crypto/sha3.ShakeHashvendor/golang.org/x/crypto/sha3.(*state).Clonecrypto/internal/mlkem768..inittaskcrypto/rand..inittaskerrors..inittaskvendor/golang.org/x/crypto/sha3..inittaskruntime.memequal16·fruntime.memequal64·fruntime.gcbits.0100000000000000type:.namedata.*mlkem768.fieldElement-type:*crypto/internal/mlkem768.fieldElementruntime.gcbits.type:.importpath.crypto/internal/mlkem768.type:.eqfunc512runtime.memequal_varlentype:.namedata.*mlkem768.nttElement-type:.namedata.*[]mlkem768.fieldElement-type:*[]crypto/internal/mlkem768.fieldElementtype:[]crypto/internal/mlkem768.fieldElementtype:.namedata.*mlkem768.ringElement-type:.namedata.*[1088]uint8-type:.eqfunc1088type:*[1088]uint8type:.namedata.*[128]uint8-type:.eqfunc128type:*[128]uint8type:.namedata.*[320]uint8-type:.eqfunc320type:[320]uint8type:*[320]uint8type:.namedata.*[32]uint8-type:.eqfunc32type:*[32]uint8type:.eqfunc2400type:.namedata.*[2400]uint8-type:*[2400]uint8type:.namedata.*[]mlkem768.nttElement-type:*[]crypto/internal/mlkem768.nttElementtype:[]crypto/internal/mlkem768.nttElementtype:.namedata.*[]mlkem768.ringElement-type:*[]crypto/internal/mlkem768.ringElementtype:[]crypto/internal/mlkem768.ringElementgo:constinfo.crypto/internal/mlkem768type:.eqfunc10080type:.namedata.*mlkem768.DecapsulationKey.type:.namedata.*func(*mlkem768.DecapsulationKey) []uint8-type:*func(*crypto/internal/mlkem768.DecapsulationKey) []uint8type:func(*crypto/internal/mlkem768.DecapsulationKey) []uint8type:.namedata.Bytes.type:.namedata.*func() []uint8-type:*func() []uint8type:func() []uint8type:.namedata.EncapsulationKey.type:.eqfunc6144type:.namedata.*mlkem768.encryptionKey-type:*crypto/internal/mlkem768.encryptionKeytype:.eqfunc1536type:.namedata.*[3]mlkem768.nttElement-type:*[3]crypto/internal/mlkem768.nttElementtype:.eqfunc4608type:.namedata.*[9]mlkem768.nttElement-type:*[9]crypto/internal/mlkem768.nttElementtype:[9]crypto/internal/mlkem768.nttElementtype:.namedata.t-type:.namedata.A.type:.namedata.*mlkem768.decryptionKey-type:*crypto/internal/mlkem768.decryptionKeytype:crypto/internal/mlkem768.decryptionKeytype:.namedata.s-type:.namedata.dk-type:.namedata.encryptionKey-.embeddedtype:.namedata.decryptionKey-.embeddedtype:[128]crypto/internal/mlkem768.fieldElementgo:info.[128]crypto/internal/mlkem768.fieldElementtype:.eqfunc256type:.namedata.*[128]mlkem768.fieldElement-type:*[128]crypto/internal/mlkem768.fieldElementgo:string."mlkem768: internal error: invalid decapsulation key size"go:string."subtle: slices have different lengths"crypto/internal/mlkem768..stmp_1type:.namedata.*go.shape.[256]crypto/internal/mlkem768.fieldElement-type:*go.shape.[256]crypto/internal/mlkem768.fieldElementtype:.importpath.go.shape.type:.namedata.*[1184]uint8-type:.eqfunc1184type:*[1184]uint8type:.namedata.*[1]uintptr-type:[1]uintptrtype:[]uintptrruntime.memequal8·ftype:.namedata.*[1]uint8-type:*[1]uint8type:.eqfunc24type:.namedata.*[24]uint8-type:*[24]uint8type:.namedata.*[2]uint8-type:*[2]uint8type:.namedata.*[3]mlkem768.ringElement-type:*[3]crypto/internal/mlkem768.ringElementtype:.eqfunc64type:.namedata.*[64]uint8-type:*[64]uint8$GOROOT/src/hash/hash.go$GOROOT/src/io/io.go$GOROOT/src/crypto/rand/rand.go$GOROOT/src/vendor/golang.org/x/crypto/sha3/sha3.go `4GuR k.uix(%~v\nN`x ` k~04AA+*5| *,A3KA; :+2^=l$,$w'h',3h33"P $h$"O #ne $"H # *t d( ! !!$"/!#8$/$A$$B!%O#S&+''/1/1%02c&  5  #Y" "5+5D8**!@@)D8(e@X*D8)@X%}9 /Dh,C;D8+@,<D8+<@x.@)` 0*` /``` 8```+` t```/` ``3`!` d`P```j` ```(` |`8``9` ```(` `8`@```` ``` `Z` 5```(` `P`@``i` `l`@`p`` #`8`p```` `T```` `8`n`8` ````` `8```i` ``p`#`` `8`3`7` W``y`` 7`4``#` n`4``` b`4`y`'` Y`L``-` `L`E`-` `L`x`1` ``2`;` [```)` I``P`q`>` E`L```` ````A` R`d``U`` (`L```z`b` ``p``` `|```` b````` ``@``` ``0`\`` ```5`` *``0``` F`L```>` `d`@`k`F` `L``E`B` `d`@``J` '``0``` |``n`#` `d`@``J` (`4```r` )``n`&` 5'6````` ```` ` ``` ```` ` ``` `` `` ``` `` ````` `` `` ` ``````` ```` `` `` ` ````` `` ` `` `` ```t`(`` ` `` `` ` ```` `` ```` `` `8` `````%``D`` ` `` ````U``!``````` ``````h`%`````$``,``` `` ```d`%`_```````` `````````````` ```````````````` ````````` ```````` ```````` ````````````````````````` ` `` ```>`` ` `````````@`` ` ```,` `````` ` ` ```F````` `H`` ` ```V`%`````L`` ````^`$` ```!`d`#`` ```` `````````` ```````-``<``$```````````````4`` ` ``````! 83@X4P&5*66$6(6%+7P77 7 8 W8&8'8*999+:: :';';';`<q<'<==&#=&I=+=/i#)6*D:>8 Y 6q*3'/#1~>% >3'# -.!1.%D>6L? f?? ? $@ M@ (t@@ ""C "e ;>FI$" "+-M0z"S "u0 3"# 0E 3u< ?J" "! <C  ? " " +# .N - 0 " " - 0""+ ." " ) ,!"6"X,z/-j 0"0"R+t.) ,, /73 6 1!4!*!"-K"*x"-"-"0 #*#-#-S$0$- % 06%*%-%,v&/&0,' 3\'"'8':!(8[(:(9(;')/u)()%%*,y*+*",!^,O-^-Ny."%/eG/UA0O0e+1U1Uf[FA-EUe jE4.G\XL/7F0G\ }L1+12K\2L2RL2RQ .?3 f }7  ,2 A7@ ,9M @>w 37' ,7^ ,> 3B ]<_ 12 G/} \< 11L 6C 9f }2B A5P# C8' b2& u4& Z2# A5f% T5$ L<+ 1,, )<, 1CB, 9;T! 955`6-6E8,6E8l7EH|7E87)EH7E877EH8E8*8KEH88E8G8s8E83EH+8E8*8E8,&9E8+R9E89>:E8=T:EH:E8:E@ ;o;,;E8+,EH;, <E8+5<EH=0 >E8/o=EH9?E88MAX?EH?E8?EH1-E8?@E8 )EH@>@E8+EHf@E8 +EH-@E8,0EH@@E8WEH`` 80``+` t 02<n}``/` m`3`!` d &```j` ``(` |``9` ``(` `@```` y  5| ; `` `Z` 5  ``(` ;`@``i` `@`p`` #.`p```` /```` ,\+`n`8` 4*:+```` L```i` /4`p`#`` `3`7` W-!`y`` 7``#` n``` b`y`'` Y``-` `E`-` `x`1` `2`;` [E&``)` I`P`q`>` E```` ```A` R``U`` (```z`b` (`p``` )```` bb)```` `@``` `0`\`` /J*``5`` *+*`0``` F+```>` `@`k`F` ``E`B` `@``J` '`0``` |;//`n`#` `@``J` (```r` )`n`&` m3?5T5)d5o62=?t_R=AxGt_R=AxGۅ"1دjt\CaDy5~ۑ\c;R>|n]ݙ5<ի7 L|.S?r- ˁ0UQܐq td9(o`Mu|ѾaVhPof51oixBR:]B)02LS">1Z3Ҏ[rr@ji/єH)(*i^Rd4g`9Fc#F9(o`Mu] yW\T#)tv/ nZ1R> <+830Q)U]"x6 Z^MiI jCUm+lߢ{($ JtO -.3ž/ o }ص@M҅L9(o`Mu0uhδK, 5ӧlDȁ'P^nqG=˔}Ğ ~Uc?Qll[pݫlDtn'6*Tؽgȕص@M҅L9(o`Mu0uhδK, 5:(I\tBaqU.v:{S[h瓡-d *XǡrN:ػ nqw89Vg|Y,c0"9(o`Mu9sx3Zzut7x9@JfŏwdXZ|GZ8? ].4[0 {:9Ҝ_YZ%u7( 9(o`Mu|CWu-zYC~y9=1,qسN0P $D~K%Hg܋bjtrjB:s{[>ص@M҅L9(o`Mu0uhδK, 5%͝_\!Jž_-%7%E]FB&8s:~Νns]:NV3A;Eg,mVG1z!a2Q3'9(o`Mu1t;yar4Fׂ!Wl/\MNHLg]|67ϓ˜-h^r{.Eͺ.Qhu Aj&{cZsYFOZ, B9(o`Muڴ=:4Oj(/S_ ⨇@}۵=f+D}sk^#t0sȥBO UEUWy-Yj_V"yv]$o9(o`Muw}KK_LTfUSQ,L*a&$Ԟaq|3` OM7$\Hhg[ɿ 3+py#gNF| Q' 3d!t9(o`Mu4M=4]vN)?XK"l7|U.nФU-;E_A4m~9P,g%dtaSʺ 0{?4_#/Ծ3כ?f 9(o`MuLEHQOBl_#&el89<˷ =!.Jq i aEW}+7>{(:#NEnV+V*aSp9(o`Mu\Wc2jt 9:q~ᖶ"a7֫yrz('\ިأ6I\<&p ,/-EGc7M3Wy{mJdwC$rON2&e{nX9C2НC*h0^BsLFYPG0lu9(h n!ǽp=, ΐɺc? h=ѥQt/[ڴy)1rs7 _nϬ:&415v|_A{\D7Xw\4y҉E"^65aF+7w_{vU] ) P@'3AvϞY܍jϑ-:sC@#5B!0l91 6VWʿ@J<R8$,+i9.ϭB <6O >i[=r5Faz/y>Ae Ӽ>D/g_9‰EfLg)2kVye3eX Cϸ `Kg=%_u*6SjY} 8HB!HAaS?*}C&@"C1WDbeػRMoBM}Ugܳoq+@k.A)o + -cwzF`Ƃh3L*mY5wgI'_*9(PRLS]MZw'@%02$)]q qo>'潷6Mi8o/3851&S;0"(w]4Հh8Q[af? ͜]OVUesMx/dͱZ*R.1 9O0vw@F#}f]X m@LldSvƅ+'miä9GD'iYn.Y qIOz^ҵ[*Wk<'WO)ܘIػ{b w\[ېx2[E;'|* K0SYq@TiOE,ցjD&G H=h1H|0D~ $ @Qcuj$P"ySx(rD; UQB^QXc7`N/LBOn <,'B YCVFz=5(q=87 }OR)|EOi%Tikqrgp^q8VMO:ԓCOx$#J-.6~ 0:Z\)L28GQwKYYieܲ3',t{Ex3bJF/B : >w8FX%W_9q b,ب@i$b|DJab &u[ 1RX-pE怚uUí f9?o @l"ֽt(qi4)S . sAFIsA/mA7RQK/]BTw)ǜ"z9-.6~ 0:Z\)L28GQwKYYieܲ3',t{Ex3bJF/B sWhX`j@|yRAN/p@`#ԯ C`F"]8D =wͣgeUɓHKw۹[ɁF@k~3QhcI'{$گtWEwTP0~6`ratsfp<|7n(4k\h" Ȼ\Xz23ŹfvZ3 XyNvT@ baxD9L9Ы,THuXj[àUQi0h=8M;돈t9?GaMma`#@MՋ!Wit:պHCVTVtX'o)Vx+/D<}'d꫋(9 9ꭋ&M6-5 4t]h Nz45X/U y3AUj8гj-/,g@:q9+X bVI k8"p, 1 !(-*Ie;Dhg)zV X$ZѯDǁm}Ek6_Qekq=IܷE θ)xI)=\Y/Jxe}Z9t2$A4KP 8)Q)@Pn8jqgۢbDWNx,Jl^cpr,15[L Ѹ:h]% ) .P9yE;fߤ3~b8fk[78 I`FWnX]7}@64̠ski>wGh.0u?ЩSV<1RͳOxFK ^}׏!3\KD kZ|'r Ru]uReMb 8[|8Ӣ|͕N: Hq Z¹0ɯx;*A_WR R_T0ɯx;*A_WR R_T)XM ek}tuqym0ɯx;*A_WR R_T0>v{k9 3zM^$Ze?BWR R_TڵT*}V22:[>I&,WR R_Te?BWR R_T$Hэ\-yXuǨŽ.B`[>I&,v1  “c~{4I]6w4dcܒq|*Jҵ:9vOj=rם &Ze?BWR R_Tڪ4w2WjL4X,&+i ۀ˖[>I&,WR R_Tڮ1y$D3ږLP3%6[+)[\~_dî!-B]SĀTu^" Wp$!&L\̌[>I&, e^eJG=~.i, ̨xX&,LgWR R_Tگ[>I&,WR R_T`3P@_"/%LwI~G6#, <=oWR R_Tگ[>I&, e6#, <=oWR R_TEIyWR R_TWEEum:!ۄWR R_TGʏ{d11WR R_T Ze=|lWR R_T%NlqSA*fMWR R_T%NlqSA*fMWR R_TETcs.ע}7\ R;9!@IDd> wU(GHR T y|Z E9_z5! F> bP^4C-o^/M,ucߊ̠0mʸ7F}A۰XV~tK68&̠0mʸ7F}A۰XV~tK68&J2jbYċ7~_R 4Cǹ丙.f6"uQl۰XV~tK68&HR T y|Z  F>  (,37?vz *00000000005<BHMW`kqy$$&-.LLNOYY[\iiklvvw}~    889?@ddhopnnpq~~ PPQR^^`ajjop++,/0==@IJggilm||~*+WW[mn  AAI^_  " " $ * + E E F O P q q s x y                                                                                                                                                             % & , I P V ^ b b d f h j l l o s t w x z { | } ~       $ ( ) * . 4 5 9 ? @ D J N U V \ ` f j k o u v z /;Obu&:Nbu  4EVgx%5FVfw_ndO@#!!$&+(,B,c,u,,,-_---.H0Z136407'9;r=~?ADDDEPEEE0FIJUJJKK=L=MmMmNNNNOOOO[PwPQFQQQR5RRRyS VtVcWW'XOXXYYY]ZyZ![I[[\U\1__`Ea%dCmnppqq^rrrtUuYvvwuzz|U|}%݇z X5f֯еȷ29pٺG{3ɼBi½ M׿#h(tBcWVMB<x\`=k|pbZ | '  >(nJ T  >>$?????????????@@ @@@-@0@;@D@D@K@V@Y@c@f@q@x@@@@@@@@@A AAA%A.A.A5AFAMA_AfAqAxAxA}AAAAAAAAAAAABBBB$B9BFBBCCCCCCCCCCCCCDD8DDDUDdDdDnDDDDDDDDE*E2EvE~EEEEEEEF.GG H HH#H*H:HAHLHSHSHYHmHHHI,IAIAIIImIuIIIIIIIIIVJ{JJJJJKKKK*K1K1K6K9KMUM]MmMqMMMMMMM N+NCNKN[N_NNN OO)O-OsOOOOOO P)PIPRPfPjPPPPQQQcQQQQQQR(R5R;RORpRRRSS#S&S@SMSTSeSiSSSSSSSSSTT!T3TRTTTTT UU"U&U+U/UJUQUbUfUUUUUUU VV"V2V6V;V?VNVUVuVVWW7WMWgW~WWWWWWWW X8X?XPXbX{XXXXXXXXXXY1YNYxYYYYZ4ZYZiZZZZZ#[-[;[H[S[_[j[[[[[[[[[[[[[[[[[[\ \ \\\#\+\6\9\H\W\^\b\k\m\y\\\\\\\\\\\\\]]]] ]0]@]E]G]R]U]Z]\]_]a]d]f]k]m]r]t]w]y]~]]]]]]]]]]]]]]]]]^^^5^M^e^m^^^^^^^^^ _"_:__`Dab;erfg6iij jjj"j*j2jMjjj7kckkkl.lalll6mmmm2nnn3oo pdpppEqvqqq rBrJrRrbrrrr*sbsrssstJttttu"uZuuuvJvvvvwJwwwww*x:xrxxxyJyyyy.zfzzzz&{n{~{{{6|~|||}F}}B6SYAa6&``>!3C U|Z,k pp}]> |, p$}6]U i 6%9S !0}:]N q 6%9Sa  ~]3=6Bd $+KT&s$Kkt&-+K\a||=DISr3Va%V( # 8  5%9 S`D>I[p |, p}]   !0G]l3M5R # 8Ed= BQ^] +N N($ &3V$ +$ /k%+Nk',k"Ka V     %  ! 'K n    :  $3B]Rv33IwVyC= BQ^]  .ln#%!Kk &3k% .Kpy' k{ !0:]YAI{BJ{5BMXv0KDL{bmx0KDL{q0K3KmB ++Bh0Ko7+n9+9"/:GT3Km2 %2AN[e[H[I[J0 (`0+/ (`,*0a0 (b0-1 (b,,0+83Ha0 (d0/1 (d,.0+83Ha>dHv2a!S0 (l068aHnLKPTXp\K`d0 (q03L (q,20a8`3Pa`thOxuR0 (v05M (v,40a8`5Pa`whOG (l,10a8`6Pa`xhBxy3z5#7+L"9*L'Nq4<^RrV?asktoF?Nq?Gl]raClsvxzFC1&.,ErQ|[r_GXN+1&.wDrHLSr_|imFLvzLK|LPK|#LhL3 L}1)1hKsOP[rh|srwuP;1)1IrMTZs^3Tjrw|}7}15=hcsgXsr|ruXa g15=3UrY]ismY]yr|s]s]\|]|_] H   (   8   b     g  ! ~    B w    G z    1,Oi-/2$ ,P  DrHbRVZb`dbprz~bsssbab@a_babab a vbab$a-1b70a@DbJN V: ei q:  :  M [:bcobkbsba' b/?b7rb   + .$b)6-b }  q& .h TsXfks~s|uf  a     q& . FJkcsgYkzss|kj|k  zk 7   b   8   >q32$ , DHpSsWZpaeposzs|sps0po|p        h  8  a   1    -W" * BFuTsXYud|oss uxtu`t|)utu0tu: X X8xNSH}wWaEzJ}) ^    . a    B w    E x   & [    )\,.Ofq%-e EIzTXFzbfzrsvzsKzsz@zuzzzyzyozy zy Oz'/u<@zFyOSYzY]Pyh7lzq?uzzH~ zy[=zcrzkzszy'z/Bz7uz.z6 z6,[0! z5c9V z>kB zGsK zPT0y_'c zh/l& zq7uY zz~Mk. z6 zH[ zc: zko zs zpy' z/ z 7= z *..2p z76; zCG O ^[b zgck zpktS zys} zy' z/ z7!z  .Tz6z;q&.FrJ~]sa3~ss|:HN!3ED5q2$,DrHRVF`sjsnws{sssss+^_ `"&=.~=A>I~W [?c~tx&.6>=@%-#+S<HNW"*BFTsXFd|jsw~|@||:Xx8NZF{Gz*_fq%- EISWFcsmq}pR[c k>ss'/7   $.(?-61r9!=EUT[!X]c!afk!j"os!sWx"|0'"/",=6+. d0.(5|;?G7;+ .(.623;n+ !'!/%3177;f@DL[._d6h;n+" '"!/"%3177"=AIX6\f;+# /*#(.2#48@.O6S3;n+' 8''!/'%3177';f@#D L7[*#_dhp76;n+) A*)!2)%3*:).f:@B)DI#MU?d*#hmq&y?6;n:+( B*(!2(%3*:(.f3B(7CIJ(MR#V^Am*#qvz(A62;n% O'%!/%%3177%;f@G%DIW%MRh%V;n+& +)&!1&%3179&;f@I&Dq$ -$!6$%*>$0I$6;T$?h0cV dq19PsT^lsvsz([$`-$6$>$NI$T$%G%\W%H;p/ 7(.?237<H@hE@JQ X  0 c  i  7    *  q1 9 PsT^lsvsz([$P-$6$>$aI$T$/%  G%W%% : G%W%""!!;!p!!!!O!!/3!;%!RVblp3u~h&^!{!9&I&&!!9&I&G""(""""b""{"R"""-"`"""","_""q2":"QsU_msws{Z$ -$6$>$sI$JT$%""G%W%%%"`")G%-X2W%6<%@n"H"WG%[`W%dj%n"v"G%$W%W#X##;###6#i####5#h####/4#<#T Xdnsr3{P.&##9&aI&&##9&I&& ##!9&%-*I&.`4&8#@##O9&SXI&\$x$$8$$v$$$9$l$$$$8$k$$$$7$j$$$$8_/2($0$GsKUYneosy}p1d0c T$$,0U$8$F JV$R$c"gr'"v{/"$$6/"0'"b/"$$6%%%(%%%%%=%%%%%b%%%%A%t%%-!%)%@L\fjox|5(:({J(#*#%%6( J(Z# *# %%-619'=2%En%T7'X]#al*#p9uy6l&x&&X&&&&;&&&&&& &?&r&&&&&-&& &=KUY^im3rpyPx'7'#*&X&*#B&X&67#"'2'"6j;?[&Gz&V6Zae&m&|'&&6'x''X'''X'''N'''1''':'m''''L''''+'^'''''/%'-Y'DR\`eptFypy)P2'P7'e# `'' *#$)-u'5'D6HPT_'ch/lDq7uwz~''.6)''2)#:)VB)#''*#''6"((((v(((a((("(Z((bd-2$(,(EsITXncgs}Y"*T((,U((-V((+# +'-+1< +@RX;n\W! [[!c!(k!.3s!7="APL'"P3U/"Yf^b2jAy6}=r @/HPEdo[{[[![!c!5k!js!"'"/" 68X;n\W j[c(k.3s7=APL'P3U/Yf^7bgk3sO.6=r @s-GOGcnZzZZ[c5kjs'/78.k6A\W^f7s w |w     8 |9 x ..@(.,S4eDHxP`dl-WNV7jusya|=r @s/HPGdo[{[[[c5kjs'/78.k6 H2$r\q^f}7swsss@8$-$*6$ >$I$T$#jqNVjusyas3 (08/3 !(08@HKn !Kn#Kl{ ]9]^]{ ] ]+JWaK_ dKn#>I{#.TK_d--//--//--G_7g7o7x+3<32;333;DMX/q*s2s:Bq'/s7sCOW3)13_7g7o7x+3<.8>82s:EsPs]+3C8S8d8p8-5E8U8+3<8.6>FO8.6>G8/q$s334K0 (c03 (c,20+K4 (e,608q0 (e05K7 (f,908q0 (f08K: (g,<08q0 (g0;K= (h,?08q0 (h0>K0 (i0B@ (i,A08q0 (j0D (j,C0-0 (k0F (k,E0/K0 (m0I (m,H81@q0 (o0K (o,J8qKK0 (r0OM (r,N0-8DK0 (s0RP (s,Q0-8DK0 ({0US ({,T0+830 (0W1 (,V0+83HKX (,Z08q0 (0Y0 (,\08M0 (0[0 (0_] (,^08qK0 (0b` (,a08q0 (0d/ (,c08q0 (0fM (,e0/8FK0 (0ig (,h08q;=<  >A?@       BECD       FIGH    JNLKM      !ORPQ"# $ % & ' ( )SVTU*+ , - . / 0 1WZXY23 4 5 6 7 8 9[_]\^:; < = > ? @ A`dbacBC D E F G H IehfgJK L M N O P QimkjlRS T U V W X YnrpoqZ[ \ ] ^ _ ` aswutvbc d e f g h ix|zy{jk l m n o p q}~rs t u v w x yz{ | } ~                                                                                                                           ! " # $ %&' ( ) * +U8U:,- . / 012 3 4 567 8 9 :;< = > ?    @A B C D E FG H I J KLM N O PQR S T U VWX Y Z [ \I;fvGUHH HD$0HH\$0H9tHD$` HD$` HH ]HD$HD$I;fvRUHH HD$0HH\$0HÀH9tHD$@HD$HH ]HD$HD$I;fvUHHHH]I;fYUHHXHD$hHfHD$P HHtsHSHҹ#HH1HH\$0HD$@HHL$0HH=uHT$@ HT$@IHHH1HX]HHD$H HHtsHSHҹ#HH1HH\$(HD$8HHL$(HH=uHT$8 HT$8IHHH1HX]HD$hH\$PHL$H11HX]HD$HD$I;fv=UHH HL$@H\$8HD$0HH\$0HL$8H|$@H ]HD$H\$HL$HD$H\$HL$I;fvVUHHH\$0H@t0HH@H HHH1H]HK 11H]HD$H\$HL$H|$ HD$H\$HL$H|$ rI;fv=UHH HL$@H\$8HD$0HH\$0HL$8H|$@H ]HD$H\$HL$HD$H\$HL$I;fUHH H\$8fH` HD$0H|$HH\$8H޹,HHHL`!HLHuXH\$8HÀH|$HHǀHD$0H` HDHtHH1H ]HD$011H ]HH1H ]HH@*H HHH1H ]HD$H\$HL$H|$ HD$H\$HL$H|$ II M;f UHH@H$`HuH$XHH$XH$8 HH$$D$$D$ $(D$0$8H$81<s$111H$p$H$( HH$pH L$8JH`!H$0H$HHfHl$Hl$HmHH$HfHl$Hl$HmH$HH$Hl$Hl$HmH$0H$HHl$Hl$HmH$pH$H$8DHH$H 1˹H1H$h$H$( HH$hH HH H$0H$HHfDHl$Hl$HmHH$HfHl$Hl$HmH$HH$Hl$Hl$HmH$0H$HHl$Hl$HmH$hH$H$8DH1I@H}DH$`IH H<H` H$0HH Hl$Hl$Hm1YH1ɻ` 1H$XH L M`!H$HHLfDHl$Hl$HmHH$HfHl$Hl$HmHHHH$XHHHHHH$8H_1H$PH L M` H$HHLfDHl$Hl$HmHH$HfHl$Hl$HmHHHH$PHHHHHH$8HgLF L9s3H$xHHٿ H5LH$xIHHH$(L$xH$H2 H$H$HHl$Hl$HmHDŽ$PHDŽ$ Ƅ$XH$xHH$HHIHH?L$(J H$HLH$H$(H$xH$H$`Hs H9s/H$xH H5H$`HH$xH$xHHӹ H$xDH` uH$8H@]HHH$0H$HHl$Hl$HmH$HHL$`H$8HOK@HH H$HH H4H`H$HfHl$Hl$HmH H4H`!H$HHl$Hl$HmHH$HHl$Hl$HmH$H$HHl$Hl$HmfH$HH$ffHl$Hl$HmH$HH$0Hl$Hl$HmH$HH$HHl$Hl$HmH$HHl$Hl$Hm1HDHDDHF Afi B L@fDHLDH=| Hع H L$8J<H`H$HHl$Hl$HmAIL@$ ωH$@$DRD$EAH$HHfDHl$Hl$HmH = HD$H\$HL$HD$H\$HL$I;fv=UHH HL$@H\$8HD$0HH\$0HL$8H|$@H ]HD$H\$HL$HD$H\$HL$I;fMUHH@H\$XfHHD$PH\$XHL$`H|$hHHD$8 HHHSHҹ#HH1HH\$(HD$0H@HL$(HH=u HT$0fHT$0IH1H1HIL IHH@]HD$PH\$XHL$`H|$hHt$8H@]HDH@*H H1H1HIL IHH@]HD$H\$HL$H|$ HD$H\$HL$H|$ wII:M;f0UHH(H$XH$PH$HH$@Hu$HH$HH$@H$PH$ HHH$D$8D$D$HH$xHHl$Hl$HmHDŽ$@HHDŽ$@Ƅ$HH$XH$x HH$xH\$8 HH$x11HH  H H$hH$`H$HQH$XHH? H$pH|$X1HHD$XH$HH$PH$@H$pH$H<Ht11HIIIHHH(]H$`HH$ H\$XH$XL$XH$ L$hE1E1H(]ø HHʹ HD$H\$HL$H|$ Ht$(HD$H\$HL$H|$ Ht$(zL$0M;fUHHHH$`Hu H$X1nHH@'H HHHHH]H$0HǀIII?ALQL$@K IHLH$(H$0H$@HHH$8HH$8HH H$(HHffHl$Hl$HmH$(H$(Hl$Hl$HmH$XH<HH$(fHl$Hl$HmHuL$(IHH]1€s $'1a11HH]L$XAH I<HH$(Hl$Hl$HmAqLH$(H$@H$0@s@$&HHH$'DRD$&EAH$(HHl$Hl$HmH A LH@HD$H\$HL$H|$ HD$H\$HL$H|$ II! M;f UHHP"H$`"H$h"H$p"H$x"H$"L$"HH$IɹI1HH$H11H$("@$HHLH$("H HH$H"H$ HffHl$Hl$HmHH$ fHl$Hl$HmH$ H$Hl$Hl$HmH$H"H$ Hl$Hl$HmH$("H$1H$x"H$h"H$"L$"L$p"L$`"H1H$ "@$HHLH$ "HH HH$ HfHl$Hl$HmHH$ fHl$Hl$HmH$1H$x"H$h"H$"L$"L$p"L$`"H:HHLH$HffHl$Hl$HmH$1HH$h"1HCH}AH$"HH HH$@"HHl$Hl$Hm1H$ Hl$Hl$HmH$p"1.HLALPHEE!AEifDD LH=}1HHH 5IIIM)DfM}H$H$ fDHl$Hl$HmH$ DHl$Hl$Hm16H$ H$ Hl$Hl$HmH$"HH$h"HCH$"H H4H$ ffDHl$Hl$HmHH$ Hl$Hl$HmHH$ Hl$Hl$HmH$H$ Hl$Hl$HmH$ H$Hl$Hl$HmH$ H$ fHl$Hl$HmH$ H$ Hl$Hl$HmH$ fHl$Hl$Hm13HH$ Hl$Hl$HmH$ H$ffHl$Hl$HmH$ H$ Hl$Hl$HmH$ H$Hl$Hl$HmH$ Hl$Hl$Hm1HD DD E Afi AL@fD LDH=|H$ H$ Hl$Hl$HmH$ H$Hl$Hl$HmH$ fHl$Hl$Hm1ID DD E Afi AL@fD LfDH=|H$ H$ Hl$Hl$HmH$`"H$1ɻ@1H$0"H$8"H$ HHffDHl$Hl$HmHH$ fHl$Hl$HmHHH@H$8"HL$0"IHHLHaHHH$ Hl$Hl$HmHHH@HP"]D D  fi HPfD HH=|= H$@"H$ Hl$Hl$HmH$"HH$"H$h"HL@IؐI H$"I J4HH$ Hl$Hl$HmH HH$ fDHl$Hl$HmHH$ fHl$Hl$HmH$H$ Hl$Hl$HmH$ H$Hl$Hl$HmHH$ Hl$Hl$Hm@H$ H$ffHl$Hl$HmH$ H$@"Hl$Hl$HmH$ H$ Hl$Hl$HmH$ Hl$Hl$Hm1HD D Dfi AHXfD HH=|L HD$H\$HL$H|$ Ht$(LD$0HD$H\$HL$H|$ Ht$(LD$0@I;fv[UHHH\$(H@t5HH@#H H1HH=H1H]11H]HD$H\$HL$H|$ HD$H\$HL$H|$ mL$M;fUHHH$H$H H$H`!HH$H$xH$(HHl$Hl$HmHDŽ$HHDŽ$@Ƅ$HHHH$(H$(H$ @H$(11HH H H$H$H$H@ HqH$pHH? HH$H$HHl$Hl$HmHDŽ$PHDŽ$@Ƅ$X HH$HH$H$@HH HH$Hù HH$H|$01HH$xH H$HH$H` HD$0H$H$L$pH@t1/H$114<1H H@|ʐHrHH$H$1DA!D 9A!E D HH | HH]ú HHʹ HD$H\$fHD$H\$L$8M;fUHH@H$XHu H$P1jHH@'H HHHH@]H$0HǀHHH?IRL$8I1HLHHH$ H$8H$0H$(HH$ HfHl$Hl$HmH$ H$ Hl$Hl$HmHuTL$PAL$ MI K<H$ Hl$Hl$HmH$(@HH@]11H@]øHHD$H\$HL$H|$ HD$H\$HL$H|$ IIM;fUHHH$(H$0H$ H1H1H$HH?H!H H$HH H H$HfHl$Hl$HmHH$fHl$Hl$HmHH$0H$(HH},H HH@fH@H9;HH$HfHl$Hl$HmH$DHl$Hl$Hm1.H$H$Hl$Hl$HmH$HHH$H H$H H$f@Hl$Hl$HmHH$fHl$Hl$HmH$H$Hl$Hl$HmH$(H$H4H$ Hl$Hl$HmHH$ fHl$Hl$HmH$H$Hl$Hl$HmH$H$Hl$Hl$HmH$ H$ffHl$Hl$HmH$H$Hl$Hl$HmH$fHl$Hl$Hm1mHH$Hl$Hl$HmH$H$ffHl$Hl$HmH$ H$Hl$Hl$HmH$H$Hl$Hl$HmH$Hl$Hl$Hm15D DDD)Afi AL@fDLH=|HH$Hl$Hl$Hm11HH]D D fi HPfDHH=|HHH@HD$H\$HD$H\$I;fvMUHHf= r5HDH@H HHH1H]11H]fD$D$뜍fi Í fi  )؉fi  ÉHiɯHi )ȍfi щHiɯHi )ʍfi )ˍ ʉHiүHi )эfi  э HiѯHi )эfi  Љ !HiHi )!!i ىy !Ӏ !I;fUHH(HD$8L ;DL9|s8mH|$PLL$ H\$@HHHLH\$@H|$PLL$ LɐL9w&II)LHH?H!HLHHH(]HLHL@HD$H\$HL$H|$ HD$H\$HL$H|$ (I;fSUHH(H$8Hs H9|s9%Ht$ H$@HHHHH$@Ht$ HfH9HH)H?H!HD:Dz1'AILAIH EE!D @<LLH}tHHDD|8AMiȯIEi E)EAAAEAAAAEH s-IHMI)<M^ HH(]Hع HHHHH$H$H$H$H$H$iL$hM;fUHHH$ Hl$Hl$HmH|$Hl$Hl$Hm1)HLLKHED!ƒiҁfT\LfH}'HHH sOHHII)M},H$ Ht$Hl$Hl$HmH]@Hй H$DH$I;fsUHH(H$8HH9|s7CHt$ H$@HHHHH$@Ht$ HH9HH)H?H!H1F H_HHH?L;IDL|8DT|:AMiٯIEi E)EAAAEAAAAEAAMiگIEi E)EAAAEAAAAEAAE I/ HH(]LHHHHH$H$H$H$H$H$IL$hM;fUHHH$ Hl$Hl$HmH|$Hl$Hl$Hm1TDAEi EAAAEHJfDDTi AAADf\TH}HH?H HHr/H$ Ht$fDHl$Hl$HmH]HعH$H$I;fUHH(H$8H@H9|s7Ht$ H$@HHHHH$@Ht$ HH9@HH)HHH?H!H1A@%I DJHIII?AHLIHDL\8DT\:D\\A MiIEi E)EAAAEAAAAEAA MiIEi E)EAAAEAAAAEAI M A Mi˯IEi E)EAAAEAAAAEAIM A MiԯIEi E)E$AAAEE$AAAEAIM MDfIvlMIDRIvNMIDJIv-MIDRI, HH(]øHHHH1HHHHHH$H$H$H$H$H$L$hM;fUHHH$ Hl$Hl$HmH|$Hl$Hl$Hm1ɺ@D@I I HHHH?MAMI AMIAIAEEi EA A AEEEi EA A AEEEi EA A AEEEi EA A AELaHfDDLfDLLfDTLfD\LLH}$HvHvlHvWHvCH*H$ Ht$Hl$Hl$HmH]øHHHfH1HH$H$ L$0M;f5UHHHH$X@$pH$XffHl$Hl$HmH$HHl$Hl$HmHDŽ$pHDŽ$8@Ƅ$xHHHH$$p$H$H$HH|$'@Hl$Hl$HmH$H\$'HH$ffHl$Hl$Hm1\'AEAAEAAEAAEAAEAAEAAAEEEEEEDE)A)DfAEi BEfAEi GHBfTfDTH=}HH?HHH=..H$XH$fHl$Hl$HmHH]ùH$H$H$@$ H$H$H$$ oL$hM;fUHHH$ Hl$Hl$HmH|$Hl$Hl$Hm1FD FD L%E,DEEDCTDECLiʯIEi D)Li˯IEi D)DfAEi ADfAEi AI@fBTDfB\DH=}gD"D"IH?LHAAMiүIEi D)DfAEi BH=)H$ Ht$Hl$Hl$HmH]ùFUHHH$ fHl$Hl$Hm HH?HHH|1,H$ Ht$ Hl$Hl$HmH]HLH}HfHLE HH<H9(LIHI?M$CL!fII9MMHI?L!LT H\ 1DSE,REEMiIEi E)EfAEi EE)E fAEi Gl=E LzfD,SE,RCtG\EfAEi FEfERLDH9SHLLHHHٺHȹUHHH$ fHl$Hl$HmHH=11KLD i HiүHi )эfi HPfLD HDH=|H$ Ht$ ffHl$Hl$HmH]HLHRHQHLE HH'fH9 LIHI?M$CL!II9MMHI?L!LT H\ 1ERD,SG<+G,+EfAEi G,/ELzfE,RD,SE)E EEEMiIEi E)EfAEi G+EfDSLH9gHLLHHHٺHȹL$M;fXUHHH$@$@$H$Hl$Hl$HmH$HHHl$Hl$HmHDŽ$HDŽ$ Ƅ$HHHH$H$T$>$T$?H$HH\$>HH|$@Hl$Hl$HmD|$&D|$.1HH|,H$@H$HH\$&HH$@1HHPIHI?I!DHHPHLHMII?L!IFD&AT&fA sHssfDDL@HH})ff sHs?fTL@HHH$Ht$@Hl$Hl$HmH]HȹHȹLfHйHH$H$H$@$ @$!H$H$H$$ $!;6Ԏ  #656+ crypto/internal/mlkem768.n crypto/internal/mlkem768.q crypto/internal/mlkem768.log2q crypto/internal/mlkem768.k crypto/internal/mlkem768.η crypto/internal/mlkem768.du crypto/internal/mlkem768.dv crypto/internal/mlkem768.encodingSize12 crypto/internal/mlkem768.encodingSize10 crypto/internal/mlkem768.encodingSize4 crypto/internal/mlkem768.encodingSize1 crypto/internal/mlkem768.messageSize crypto/internal/mlkem768.decryptionKeySize crypto/internal/mlkem768.encryptionKeySize crypto/internal/mlkem768.CiphertextSize crypto/internal/mlkem768.EncapsulationKeySize crypto/internal/mlkem768.DecapsulationKeySize crypto/internal/mlkem768.SharedKeySize crypto/internal/mlkem768.SeedSize crypto/internal/mlkem768.barrettMultiplier' crypto/internal/mlkem768.barrettShiftR 6')6۫8@d6(`'jX` `! 8G Y e. Lf  0  l : Zs 7I L V   |T $ !    0  mw *m'? , 31 _"  Dn wf *v GER>w u j crypto/internal/mlkem768.gammas  R viP& 9( ; 85.B Y ? 5!K   x1 !({ '4 b W 9  &  GY eLf l s 7  T ! 0 w *m'? 31 " Dwf vR>w uj crypto/internal/mlkem768.zetas  crypto/internal/mlkem768.init(QP^:P:?h?^P  s9@UBATBtAAfcrypto/internal/mlkem768.(*DecapsulationKey).BytesQ,dkQ-~r0Q&&bR(YPlEPEJhJlP  s9@UBABAAfA- crypto/internal/mlkem768.(*DecapsulationKey).EncapsulationKeyY,dkY-~r0Y&&bZlP  s9UBAHcrypto/internal/mlkem768.GenerateKeyl-~r0l-~r1l&dkn`ru<y*h3EPw%7P7whPw`77S7ESRSSROTR^cScoPHotXHtXHSP@ P@ EP@  9@UA-AB7M2UBA-AB7I6UAsA{ocrypto/internal/mlkem768.generateKeyr,dkr-~r0r-~r1r&&ds&&zw &errt &errxu(y(($ PSR$) )h )=P  s:UBAsAH%crypto/internal/mlkem768.NewKeyFromSeed,seed-~r0-~r1&dk 7 P% SRUMRSU  s7B7U8A~o2crypto/internal/mlkem768.newKeyFromSeed,dk,seed-~r0-~r1($ PSR$) )h )=P  s:UBAsAH%crypto/internal/mlkem768.NewKeyFromExtendedEncoding,decapsulationKey-~r0-~r1&dk (Mj_P_PD SRUDJ Je e  SRUJSUJe e SUvSSUeePeoPSoPPPPSPS  7U-}=2NUAEAAAt-A|o-yU2crypto/internal/mlkem768.newKeyFromExtendedEncoding,dk,dkBytes-~r0-~r1&dkPKE&ekPKE &err &errH  W1/Z( Z( <WMZ7<WMZHlolo +/0APF`P`P hFSFNNcSFRFP ccRccSrQSQPPS PSRPRP QTSYQSYeQeePeePSev PSRvyPRyP QTS Q|S Q| | QTSX||WX||cPP ccRP c||P||PP<|<?P|Z|{{PM{MPPUY|Y|R||RMgMcMw@MPQ /X @Y @YQ+@Q  KV_b\#,_8#7~nQ_sA_/_"7O_%!ABUA_/_(}7d#_t-k=7)>_2G2)^7`7L_.J.|7N7?aB~ x_ _;_C_{a(__fUU~=po_,_7L7`$_e}37M73^_K}Qp!;e-AADv(crypto/internal/mlkem768.kemKeyGen,dk,d,z-~r0&N'ρ'σ&dkB'G &i &j &i &i &i &j &i &i (((" (("("($ PSR$) )h )=P  s:UBAsAH%crypto/internal/mlkem768.Encapsulate,encapsulationKey-ciphertext-sharedKey-err&&cc Hi7RHPH PM SRUM % SRUM`P`h``S`rSRRSPX`X`X  7U&BA-At7~U7A#MAA~GUAA#I2crypto/internal/mlkem768.encapsulate,cc,encapsulationKey-ciphertext-sharedKey-err&&m &err((0 ( QPVyPyhV SRUV VTV ''R''PR'x PSRx}`||}`||/`||/4 PSR47SR7DSDPSWbQb | U| |  UT| / |PPSSS  KV_B z[-UA~ r_ ___UB7LAtA-?B#>_B_~3#z<crypto/internal/mlkem768.kemEncaps,cc,ek,m-c-K-err&G&r'ex'H &err(  P%'Xkdgk dgAP^ooF SRUs hPX SRU hPX hPXsz hPXz hPX SRU hPX hPXQ`QQPPPSSwRQRw2w2MTMw  U`U~-~[<+2|7MUIa/B~2-&_i(#A~(#y:*7v-sA=|}2crypto/internal/mlkem768.parseEK,ex,ekPKE-~r0&ρ &i &err &i &j0X"C Y]_z18o_z1.1nU} 1  %U`chksu}@BJRbr|}JR  }JR  }%2bjuzn~Ikop*./ mPme Se hRhe ` UTX`  (e  (GGUrGrUPSPPPS% PSR%(PR((P(@ PTS@YPSYePeePeePSen PSRe KGOPnSHHR@r@rRPAP   e   b Pb   P"%%--EPEzzP({hRhe ${qPzS;zO^z{PvR~QSSRRnSn{!nOP@WQIoXMYMYW[QkQn{nSnO@{PQ.X @Y @YQ*@Q[ S~ O { P Q S X X Q Q  KX-`,B,}[-KA_/_ % dv[}[i[7c\-KAG/_}(dz[}[m[7O-KA_t_7_t-F__VJ8u7-K$#}G_k_$$_,_.^7#~=--A$_e}37M73^_K~_N$_e}37M73^iK~__$*a+-U@_H-7N-Cn_[})-M73^-KZ}_q_7Ma#$_[}3-M73^sK~Qr)7crypto/internal/mlkem768.pkeEncrypt,cc,ex,m,rnd-~r0&N&c&e2&μ&vNTT&v &i &i &i &j &i &f ("" (((" (("("(((" (("("(((" (("("(((" (("(" np:#P( SRU  s7BU}#Ay2crypto/internal/mlkem768.Decapsulate,dk,ciphertext-sharedKey-erry ~](^ _#<}+= %>RRGRTzHPHMSM6MRMXQMUPU] PS] PxR Px Px PxRPR PSR `yR `y `y PSRSRSPS*T*4 x4 Tx HxG HTxG HxPhGGSG`PS`PGGSG`PS`PqqSqSoqRqRqSQPhRR  Z#U} r_ -B_B_UB7~_Zj} _ AB_U_A`-BAt_}o_ }U< }7J."U(-{ 28._AU(A}o#{s#crypto/internal/mlkem768.kemDecaps,dk,c-K&h&z&m&G&r&Kout&c1'cc( }  )("" ()((" HXkkAPF SRUs hX` SRU hX` hX` SRURU hX` SRUSUQPQPQPPPSSw  U`U}-~Q<)7LUJ`\-&__n#zo~2crypto/internal/mlkem768.parseDK,dx,dkPKE-~r0 &i &err&f Z9A1%5BELuUUZ)=ABGPG QSQ 1c[gYm`m`$PXXPZXZ}PZkZg>Z{PRQSSRRkg{MuP ,Q)/X=MQ  KW_B,#BAI-d{[,7$7#VA_$$_,_-77=--A$_ez)-3^-K-sAn_[})-M73^-K~Qcrypto/internal/mlkem768.pkeDecrypt,dx,c-~r0&v&mask &i &i (((" (("("(((" (("7P  s87}UAAU#[(-~r0-~r1P RP M7(-~r0" P!S!R!R Q!P })-M7((-~r0"("PSP z#((-~r0#" PR./P #~KkM7(-~r0#"77P8S Q Q$(R78P -G#~KkM7((-~r0"("@?PS R&R&R,0Q?AP -x#~KkM7(((-~r0"("A APS RBU BS(R.2QABP -L-peU8KkM7&((((-~r0"(" PS(Q8OT(>QLNP -<ApVU8K (KtKv#$#((-~r0""""*PS Q+S -L#<-3-<((-~r0"" 0mM_`; PSR;E PEHH__xSPS>U>__U MYM_h_Y  7B7t#"-DB@\--y2(()) "0}~+4F zF]< PSR<F PFI I` `o PSRoPR9PILSRLWSWPSz9QS< PSR<F PFI I` `oSWPSPR< PTR<F PhhFN hhNN hhN` Phh`9 PTT<FTTFI PTRILTRLQTTQW PTRW PTTz9QNTN`h`9TY+XX  7u[ <tB#@-D-7e< 2-,.*-U$-o.U8U 2UU7k-Iuy} :crypto/internal/mlkem768.ringCompressAndEncode1,s-f-~r0&b &i ()((" ""UZ_c{P={R  AB@8u-zAU$#__A(-~r0" " #0!}}{:PYf!"{f}> PSR>H PHK K` `o PSRo\PR\aRilSRlwSwPSyfQSS> PSR>H PHK K` `oSwPS!PR!> PTR>H PhhHP hhPP hhP` Phh`\ PTT\aTRafTTfi PTRilTRlqTTqw PTRw PTTyfQ!PTP`h`T[Y!P[ (Z  7V[*ZUB#@-D-*$6}L-~8U8U 2UUo38U8U 2UU<7-IYy}(:crypto/internal/mlkem768.ringCompressAndEncode4,s-f-~r0&b &i ()(("""""WU^{ P=%{RRipX{XSS  A$#~=7V-<7Z8L7~)-L-27Z?U$_crypto/internal/mlkem768.ringDecodeAndDecompress4,b-~r0&f &i""""0!`n_h`n_h!"> PSR>H PHK K` ` PSRmPRmpRzRRRRSRSPSouQQ QXU QXUSbSnZ)Y)-Z> PSR>H PHK K` `SPS!PR!> PTR>H PhhHP hhPP hhP` Phh`m PTTmpTRpuTTuz PTRzTRTT PTRTRTT PTRTRTT PTRTRTT PTRTRTT PTR PTTouQQ!PTP`h`T(]YK]6RZY[ Z_\  7[ZB#@-D-(78y<-y3UMLLL~G8U8U 2UU~Q8U8U 2UUU~Q8U8U 2UUU~Q8U8U 2__UV-~7#-`7#-`7#-`7b-Hoy}:crypto/internal/mlkem768.ringCompressAndEncode10,s-f-~r0&b &i &x ()(("""""""""~Z#r_'BNr_PqEPQEPQQ?{'EREE\ERmXXEXYEYZEZ[#E[  $A.B7-V-~-~7~Q7V-<7~Q7V-<7~Q7V-<7~Q7V-<7Z9.LLL~G-U$-n_}o(crypto/internal/mlkem768.ringDecodeAndDecompress10,bb-~r0&b&f &i &x"""""""" P #S}+T %U5<G:<G PSRPSP5U5xPP?ESPX[YfZq[|\]_][SYSX  Ua]_L{ _ -B_A_F_`BB--j-~-}o-z)-}3}[eK$-2_~sxJcrypto/internal/mlkem768.samplePolyCBD,s,b-~r0'B&f &i &b&b_6&b_5&b_4&b_3&b_2&b_1&b_0}  ((" ((" llcFUx2n|x8cdnPcdn={ P ,Pn|Q [QY Q ZSY S8PQ8PQW\Zn|Q  ABjjU}=-8-h87p3U8U,U8Uk)WAWA}3}GGK$``-}o-)-~Uk)WAZhxKb_fs~ crypto/internal/mlkem768.nttMul-f-g-~r0&h &i (" (" " ("" ( "~8!=V|&z~ TV|&z~ |&z~ &z~&X~XzLRLLPLPQLPZPPLPSPP~Q_Q*B[*B[IN_&[]bg_z]][[  7#-s78(_zG+-U$UN4XBB}=3-~Uk)WAxx)WA}3sB}=}=AWA>_-|crypto/internal/mlkem768.ntt-f-~r0&k &len &start &f&flen &j "(" ("("%5Um/0=UYLSYYx} UZZBUR!RBSP6QBSPqPqZPPBSPvPvSPP Q  _ Q[P`uR`uR{QR[]__]]][[[] [  7#i8T (}=G#~KkM7}3@_K&_w+7ULUN4WBB}=}37WA}3B}=-x-~Uk)WA>--|crypto/internal/mlkem768.inverseNTT-f-~r0&k &len &start &f&flen &j &t &i "(" (("("(("(" = >"Sv*T $Uc@dj `j6ER_j`jR_6E PSRPSP=U=T.R.@|@$RP$P@Px6XTnQQEYY  Ua_z _ -B_AK(~37(}[_o7y37P7y)7LPyQFK$U`-U~<A Y#B/UO_}o}yys^=crypto/internal/mlkem768.sampleNTT,rho,ii,jj-~r0&j&off&a'buf &d1v ( (79#E!0AEFY0AEFQ[P(2R04QAQR  }$A[z#3^-K&))) " (("77*9[E{~EwEsEPRQR  7l$_[z#36-K"_%crypto/internal/mlkem768.polySub[crypto/internal/mlkem768.ringElement].param0-a-b-s(((" (("/1#S!0OSTh0OST`jP(<R0SQ3`S3`S<@RO`R  }$A[})-M73^7K&))) " (("("//*1[G{~GwGsGPRQSSRR  7l$_[})-M736-K"__%crypto/internal/mlkem768.polyAdd[crypto/internal/mlkem768.nttElement].param0-a-b-s(((" (("(" UW^$aOb_vx.@SexAf.@SexAf0 SRU0SR SRP SRPSRSR57SR7FRFISRISSSVSRV]S]`SR`Sax{QQ$.XDbTiT  U_-U&A{UA_z<-z3UL--~QK#~3K#{UA_{__y~Jcrypto/internal/mlkem768.polyByteDecode[go.shape.[256]crypto/internal/mlkem768.fieldElement].param0,b-~r0-~r1&f &i &d&err(UY PSRY\PS\cP  __Ucrypto/internal/mlkem768.polyByteDecode[crypto/internal/mlkem768.nttElement].param0,b-~r0-~r1//*1[G{~GwGsGPRQSSRR  7l$_[})-M736-K"__%crypto/internal/mlkem768.polyAdd[crypto/internal/mlkem768.ringElement].param0-a-b-s(((" (("(" 0AB!!"3E SRUEH SHM M` `R*}SU`oSUoSouUU URX URXUXPPYE SRUEH SHM M` `R*}SU!SU!E STTEH ShhHM hhMM hhM` Phh`o STTo STTTT} STTouUU!MTM`h`}T  7(dXQ'B#@UKD-Sy'78<-3K$K-B7#-`7:-*xy}VJcrypto/internal/mlkem768.polyByteEncode[go.shape.[256]crypto/internal/mlkem768.fieldElement].param0,b-f-~r0&out&B &i &x ()(("(AY PSRY\PS\cP  }-i_-%Ucrypto/internal/mlkem768.polyByteEncode[crypto/internal/mlkem768.nttElement].param0,b-f-~r0@=?^   ^G K@H?l lR "Y ,  , h 5 a 5 D,m5n,u5vh5a5Dz}0  ,G,O@3?&h %h=$ %K09/@/3  W 2WV <2{@3?&h %h=$ %K @?P ?P ?P.?4  E  #2E_7A*2%c Q PQQ( ? % E             71 H V   h    YD?Z%? '#%  '9 x( ? ! d=! g U$ _!A"mZ:q\ (% @3?&h %h=$ %K "A3 ; D # R !,; $# 2;D#RH,mN2*u hhhPhhh< ? %% "#D?% "$ <?Q.i1 <%  L!2:  %    (Z  ,  5g  2: &$mf3A$2%1 J%0     5  m  - 74  1)"#  m + .%  3  *% #Jm   X%  bO7" $&de>" MX!  g#'q` J%0 A0 4  Y  2Y[#>2 % ^ ? ? j V  #D? !? 1       ^??  &;V VHhS^   L 2:  %    s9   2: +IA2%1 PPPeP %  f , /"# 3 3 7z a9   %&Lzm%  90 # -# #-M 8V!!  !// 1./88 18 8AA 1FABB  ' 1VBOO(' OO++    ++ PwO`_2  2HI2!'y PO`)_:   ,     %  :Z 6B@:I):  8 ', j   PO`$_: [^] +T  )    U Z:Y1GG,:K:  8     /^   PO`X_:  7                :eLCCC E :KP: A 8         $* A J  9  JT? %& ? , ('$ &  . JT?    #!g"%%J    8    '    1   1 87 ) x  + L   r0 =&   o  1!  0  # Y#08 0 = 11  n  1F0Z"   T#8 N[T?   f % ? 24          *  K[T?       f +mW-.[Y[!  0 <  YY  !E   hj!   0 K    MM  !S   J,%Jx    /   S / 4 /./% Jx/   #+9 3%%J ;  (   8cU    MM  !S   PO`;_J ZWX 9a      ^ [JdJ%%H3J V;  .8cU-pNN*mlkem768.fieldElementcrypto/internal/mlkem768*mlkem768.nttElement*[]mlkem768.fieldElement*mlkem768.ringElement *[1088]uint8 *[128]uint8 *[320]uint8 *[32]uint8 *[2400]uint8*[]mlkem768.nttElement*[]mlkem768.ringElement*mlkem768.DecapsulationKey)*func(*mlkem768.DecapsulationKey) []uint8Bytes*func() []uint8EncapsulationKey*mlkem768.encryptionKey*[3]mlkem768.nttElement*[9]mlkem768.nttElementtA*mlkem768.decryptionKeysdk encryptionKey decryptionKey*[128]mlkem768.fieldElementmlkem768: crypto/rand Read failed: mlkem768: invalid seed lengthmlkem768: invalid decapsulation key lengthmlkem768: internal error: invalid decapsulation key size8mlkem768: invalid encapsulation key lengthmlkem768: invalid encryption key lengthmlkem768: invalid ciphertext lengthsubtle: slices have different lengths%mlkem768: invalid decryption key lengthunreduced field elementmlkem768: invalid encoding lengthmlkem768: invalid polynomial encoding4*go.shape.[256]crypto/internal/mlkem768.fieldElementgo.shape *[1184]uint8 *[1]uintptr *[1]uint8 *[24]uint8 *[2]uint8*[3]mlkem768.ringElement *[64]uint8    (  A                B    UHH$Hl$Hl$Hm1.LDD)щfi HPfDHH=|]L$xM;f UHHMf MH$ fDHl$Hl$HmH$H$Hl$Hl$HmH$H$Hl$Hl$HmH<$Hl$Hl$Hm1-DD)щfi HPf DHH=|H$ H4$Hl$Hl$HmH]@L$M9,$I$$UHH$Hl$Hl$Hm1=LDD fi HPfDHАH=|]L$xM;fUHHMf MH$ fDHl$Hl$HmH$H$Hl$Hl$HmH$H$Hl$Hl$HmH<$Hl$Hl$Hm1;DD fi HPf DHH=|H$ H4$Hl$Hl$HmH]L$M9,$I$$L$hM;fTUHHH$(HH$ fHl$Hl$HmHuH|$Hl$Hl$Hm1kHH@!H HH$ Hl$Hl$HmHHH]HIII?AHLHH"HbHDH-DDKAE EAfA r H5E11fDDTHuwA fA r H5E11fDLTHNHH@%H HH$ Hl$Hl$HmHHH]HH@%H HH$ Hl$Hl$HmHHH]H$ Ht$Hl$Hl$Hm11H]øHH1HH$H$H$H$ H$H$H$H$ PL$XM;fUHH Mf MH$0H$0fDHl$Hl$HmHHHHH$ Hf@Hl$Hl$HmH$ H$ Hl$Hl$HmH$0H$ Hl$Hl$HmH ]H$H$H$H$H$H$L$0M9,$I$$L$xM;fUHHMf MH$ fDHl$Hl$HmH$H$Hl$Hl$HmH$H$Hl$Hl$HmH<$Hl$Hl$Hm1;DD fi HPf DHH=|H$ H4$Hl$Hl$HmH]L$M9,$I$$I;f)UHH(H$@HH9|s7Ht$ H$HHHHH$HHt$ HHH9HH)IHH?H!H1%ADWIMII?AHLHH=}4DLD8DTD:A E HvEDHv/EADOHwHHHH(]øHH1HHHHHH$H$H$H$ H$H$H$H$ L$XM;fvcUHH Mf MH$0HH$0@Hl$Hl$HmHHHHH ]H$H$H$H$H$H$UL$0M9,$lI$$cregabimlkem768errors.New=!textcrypto/internal/mlkem768.polyAdd[go.shape.[256]crypto/internal/mlkem768.fieldElement]!a!b!s ivendor/golang.org/x/crypto/sha3.New256crypto/internal/mlkem768.fieldAdd!a!b xvendor/golang.org/x/crypto/sha3.new256 crypto/internal/mlkem768.fieldReduceOnce!a xvendor/golang.org/x/crypto/sha3.new256Generic/vendor/golang.org/x/crypto/sha3.New512'vendor/golang.org/x/crypto/sha3.new512vendor/golang.org/x/crypto/sha3.new512Generic7crypto/internal/mlkem768.ringDecodeAndDecompress1!b f i b_ivendor/golang.org/x/crypto/sha3.NewShake256|crypto/subtle.ConstantTimeCompare !x!y v icrypto/subtle.ConstantTimeCopy,!v!x!y xmask1 ymask2 i3vendor/golang.org/x/crypto/sha3.newShake256 crypto/subtle.ConstantTimeByteEq !x!yvendor/golang.org/x/crypto/sha3.newShake256Genericcrypto/internal/mlkem768.polySub[go.shape.[256]crypto/internal/mlkem768.fieldElement]!a!b!s icrypto/internal/mlkem768.fieldSub!a!b xcrypto/internal/mlkem768.fieldReduce!a quotientcrypto/internal/mlkem768.sliceForAppend!in!n!head!tail totalcrypto/internal/mlkem768.compress!x!d dividend quotient remainder maskcrypto/internal/mlkem768.decompress!y!d dividend quotientcrypto/internal/mlkem768.fieldMul!a!b xcrypto/internal/mlkem768.fieldAddMul!a!b!c!d xcrypto/internal/mlkem768.fieldMulSub!a!b!c xvendor/golang.org/x/crypto/sha3.NewShake128uinternal/byteorder.LeUint16 !bvendor/golang.org/x/crypto/sha3.newShake128 vendor/golang.org/x/crypto/sha3.newShake128Genericcrypto/internal/mlkem768.fieldCheckReduced!aΛX6'T2@@* @6\[ 246@@ - @p6  & 6` x?6` = ` %6 3C)Y6;04`'tJ6I3@@6 c3?6Y 6  `{A6l\ :p6O$[ 6` \?6)sY6S N6\& ;6# )6 @[}6@f @3Y 3+  & . ,-  &H-{3323.4-<4/.i4!.4