They are described in https://eprint.iacr.org/2023/1683.
The paper additionally describes a faster variant using a different key representation (nibble-sliced rather than bitsliced). However, that change is not compatible with the round-1 spec and, hence, is not included in this PR. Once the change is officially made in a later MAYO version, we can include it in pqm4.
This keeping this in draft, because the stack benchmarks are not yet working.
https://github.com/mupq/pqm4/issues/279
This adds the implementations from
They are described in https://eprint.iacr.org/2023/1683. The paper additionally describes a faster variant using a different key representation (nibble-sliced rather than bitsliced). However, that change is not compatible with the round-1 spec and, hence, is not included in this PR. Once the change is officially made in a later MAYO version, we can include it in pqm4.
This keeping this in draft, because the stack benchmarks are not yet working.