ML-KEM/Kyber: fix for big-endian

Don't pull apart the nibbles when big-endian in reject uniform C code.
This commit is contained in:
Sean Parkinson
2025-04-02 09:12:48 +10:00
parent 5ecacfd8eb
commit 4f87a8980f

View File

@ -3166,7 +3166,8 @@ static unsigned int mlkem_rej_uniform_c(sword16* p, unsigned int len,
unsigned int i;
unsigned int j;
#if defined(WOLFSSL_MLKEM_SMALL) || !defined(WC_64BIT_CPU)
#if defined(WOLFSSL_MLKEM_SMALL) || !defined(WC_64BIT_CPU) || \
defined(BIG_ENDIAN_ORDER)
/* Keep sampling until maximum number of integers reached or buffer used up.
* Step 4. */
for (i = 0, j = 0; (i < len) && (j <= rLen - 3); j += 3) {