ML-DSA-44/87: Switch to mod 769 NTT instead of mod 257 FTT

In https://tches.iacr.org/index.php/TCHES/article/view/11419 it was shown that Plantard-based NTTs mod 769 are faster than the 257 Fermat Number Transforms that we are currently using for ML-DSA-44+87. This commit switches to the mod 769 arthmetic for all parameter sets instead of only using it for ML-DSA-65. Files are in ML-DSA-44 and symlinked from 65 + 87. Stack-optimized implementations remain unaffected (they were using 769 before).
mupq · Feb 10, 2025 · 271ca71 · 271ca71
1 parent 5ef2ba7
commit 271ca71
Show file tree

Hide file tree

Showing 17 changed files with 812 additions and 1,560 deletions.
diff --git a/crypto_sign/ml-dsa-44/m4f/basemul_257.S b/crypto_sign/ml-dsa-44/m4f/basemul_257.S
diff --git a/crypto_sign/ml-dsa-44/m4f/fnt_257.S b/crypto_sign/ml-dsa-44/m4f/fnt_257.S