ML-DSA: Add properties of sampling functions #207
Labels
CNSA 2.0
good first issue
Good for newcomers
improvement
Addresses fixes or changes to existing specs
The sampling functions in ML-DSA Section 7.3 all have postconditions that we don't prove true. We should write these properties.
SampleInBall
output has coefficients in the given range and the correct hamming weight.RejBoundedPoly
output has coefficients in the given range.RBP
.ExpandS
output has coefficients in the given range.ExpandMask
output has coefficients in the given range.The text was updated successfully, but these errors were encountered: