Neon NTT reference: switch from tches to eprint url.

mkannwischer · mkannwischer · commit ad9bff97aa63 · 2025-05-28T18:15:29.000+08:00
The tches server being unavailable keeps failing our CI.
This commit switches to the eprint url of the same paper - that should be more
stable.

Signed-off-by: Matthias J. Kannwischer &lt;matthias@kannwischer.eu&gt;
diff --git a/BIBLIOGRAPHY.md b/BIBLIOGRAPHY.md
@@ -157,7 +157,7 @@ source code and documentation.
   - Matthias J. Kannwischer
   - Bo-Yin Yang
   - Shang-Yi Yang
-* URL: https://tches.iacr.org/index.php/TCHES/article/view/9295
+* URL: https://eprint.iacr.org/2021/986
 * Referenced from:
   - [dev/aarch64_clean/README.md](dev/aarch64_clean/README.md)
   - [dev/aarch64_clean/src/intt.S](dev/aarch64_clean/src/intt.S)
diff --git a/BIBLIOGRAPHY.yml b/BIBLIOGRAPHY.yml
@@ -102,7 +102,7 @@
 - id: NeonNTT
   name: "Neon NTT: Faster Dilithium, Kyber, and Saber on Cortex-A72 and Apple M1"
   year: 2022
-  url: https://tches.iacr.org/index.php/TCHES/article/view/9295
+  url: https://eprint.iacr.org/2021/986
   author:
   - Becker, Hanno
   - Hwang, Vincent
diff --git a/dev/aarch64_clean/README.md b/dev/aarch64_clean/README.md
@@ -13,5 +13,5 @@ target architecture is Cortex-A55, but you can easily re-optimize the code for a
 by SLOTHY, by adjusting the parameters in the [Makefile](../aarch64_opt/src/Makefile).
 
 <!--- bibliography --->
-[^NeonNTT]: Becker, Hwang, Kannwischer, Yang, Yang: Neon NTT: Faster Dilithium, Kyber, and Saber on Cortex-A72 and Apple M1, [https://tches.iacr.org/index.php/TCHES/article/view/9295](https://tches.iacr.org/index.php/TCHES/article/view/9295)
+[^NeonNTT]: Becker, Hwang, Kannwischer, Yang, Yang: Neon NTT: Faster Dilithium, Kyber, and Saber on Cortex-A72 and Apple M1, [https://eprint.iacr.org/2021/986](https://eprint.iacr.org/2021/986)
 [^SLOTHY_Paper]: Abdulrahman, Becker, Kannwischer, Klein: Fast and Clean: Auditable high-performance assembly via constraint solving, [https://eprint.iacr.org/2022/1303](https://eprint.iacr.org/2022/1303)
diff --git a/dev/aarch64_clean/src/intt.S b/dev/aarch64_clean/src/intt.S
@@ -29,7 +29,7 @@
  * - [NeonNTT]
  *   Neon NTT: Faster Dilithium, Kyber, and Saber on Cortex-A72 and Apple M1
  *   Becker, Hwang, Kannwischer, Yang, Yang
- *   https://tches.iacr.org/index.php/TCHES/article/view/9295
+ *   https://eprint.iacr.org/2021/986
  *
  * - [SLOTHY_Paper]
  *   Fast and Clean: Auditable high-performance assembly via constraint solving
diff --git a/dev/aarch64_clean/src/ntt.S b/dev/aarch64_clean/src/ntt.S
@@ -29,7 +29,7 @@
  * - [NeonNTT]
  *   Neon NTT: Faster Dilithium, Kyber, and Saber on Cortex-A72 and Apple M1
  *   Becker, Hwang, Kannwischer, Yang, Yang
- *   https://tches.iacr.org/index.php/TCHES/article/view/9295
+ *   https://eprint.iacr.org/2021/986
  *
  * - [SLOTHY_Paper]
  *   Fast and Clean: Auditable high-performance assembly via constraint solving
diff --git a/dev/aarch64_clean/src/polyvec_basemul_acc_montgomery_cached_asm_k2.S b/dev/aarch64_clean/src/polyvec_basemul_acc_montgomery_cached_asm_k2.S
@@ -9,7 +9,7 @@
  * - [NeonNTT]
  *   Neon NTT: Faster Dilithium, Kyber, and Saber on Cortex-A72 and Apple M1
  *   Becker, Hwang, Kannwischer, Yang, Yang
- *   https://tches.iacr.org/index.php/TCHES/article/view/9295
+ *   https://eprint.iacr.org/2021/986
  */
 
 /* Re-implementation of asymmetric base multiplication following @[NeonNTT] */
diff --git a/dev/aarch64_clean/src/polyvec_basemul_acc_montgomery_cached_asm_k3.S b/dev/aarch64_clean/src/polyvec_basemul_acc_montgomery_cached_asm_k3.S
@@ -9,7 +9,7 @@
  * - [NeonNTT]
  *   Neon NTT: Faster Dilithium, Kyber, and Saber on Cortex-A72 and Apple M1
  *   Becker, Hwang, Kannwischer, Yang, Yang
- *   https://tches.iacr.org/index.php/TCHES/article/view/9295
+ *   https://eprint.iacr.org/2021/986
  */
 
 /* Re-implementation of asymmetric base multiplication following @[NeonNTT] */
diff --git a/dev/aarch64_clean/src/polyvec_basemul_acc_montgomery_cached_asm_k4.S b/dev/aarch64_clean/src/polyvec_basemul_acc_montgomery_cached_asm_k4.S
@@ -9,7 +9,7 @@
  * - [NeonNTT]
  *   Neon NTT: Faster Dilithium, Kyber, and Saber on Cortex-A72 and Apple M1
  *   Becker, Hwang, Kannwischer, Yang, Yang
- *   https://tches.iacr.org/index.php/TCHES/article/view/9295
+ *   https://eprint.iacr.org/2021/986
  */
 
 /* Re-implementation of asymmetric base multiplication following @[NeonNTT] */
diff --git a/dev/aarch64_opt/README.md b/dev/aarch64_opt/README.md
@@ -11,5 +11,5 @@ target architecture is Cortex-A55, but you can easily re-optimize the code for a
 by SLOTHY, by adjusting the parameters in the [Makefile](src/Makefile).
 
 <!--- bibliography --->
-[^NeonNTT]: Becker, Hwang, Kannwischer, Yang, Yang: Neon NTT: Faster Dilithium, Kyber, and Saber on Cortex-A72 and Apple M1, [https://tches.iacr.org/index.php/TCHES/article/view/9295](https://tches.iacr.org/index.php/TCHES/article/view/9295)
+[^NeonNTT]: Becker, Hwang, Kannwischer, Yang, Yang: Neon NTT: Faster Dilithium, Kyber, and Saber on Cortex-A72 and Apple M1, [https://eprint.iacr.org/2021/986](https://eprint.iacr.org/2021/986)
 [^SLOTHY_Paper]: Abdulrahman, Becker, Kannwischer, Klein: Fast and Clean: Auditable high-performance assembly via constraint solving, [https://eprint.iacr.org/2022/1303](https://eprint.iacr.org/2022/1303)
diff --git a/dev/aarch64_opt/src/intt.S b/dev/aarch64_opt/src/intt.S
@@ -29,7 +29,7 @@
  * - [NeonNTT]
  *   Neon NTT: Faster Dilithium, Kyber, and Saber on Cortex-A72 and Apple M1
  *   Becker, Hwang, Kannwischer, Yang, Yang
- *   https://tches.iacr.org/index.php/TCHES/article/view/9295
+ *   https://eprint.iacr.org/2021/986
  *
  * - [SLOTHY_Paper]
  *   Fast and Clean: Auditable high-performance assembly via constraint solving
diff --git a/dev/aarch64_opt/src/ntt.S b/dev/aarch64_opt/src/ntt.S
@@ -29,7 +29,7 @@
  * - [NeonNTT]
  *   Neon NTT: Faster Dilithium, Kyber, and Saber on Cortex-A72 and Apple M1
  *   Becker, Hwang, Kannwischer, Yang, Yang
- *   https://tches.iacr.org/index.php/TCHES/article/view/9295
+ *   https://eprint.iacr.org/2021/986
  *
  * - [SLOTHY_Paper]
  *   Fast and Clean: Auditable high-performance assembly via constraint solving
diff --git a/dev/aarch64_opt/src/polyvec_basemul_acc_montgomery_cached_asm_k2.S b/dev/aarch64_opt/src/polyvec_basemul_acc_montgomery_cached_asm_k2.S
@@ -9,7 +9,7 @@
  * - [NeonNTT]
  *   Neon NTT: Faster Dilithium, Kyber, and Saber on Cortex-A72 and Apple M1
  *   Becker, Hwang, Kannwischer, Yang, Yang
- *   https://tches.iacr.org/index.php/TCHES/article/view/9295
+ *   https://eprint.iacr.org/2021/986
  */
 
 /* Re-implementation of asymmetric base multiplication following @[NeonNTT] */
diff --git a/dev/aarch64_opt/src/polyvec_basemul_acc_montgomery_cached_asm_k3.S b/dev/aarch64_opt/src/polyvec_basemul_acc_montgomery_cached_asm_k3.S
@@ -9,7 +9,7 @@
  * - [NeonNTT]
  *   Neon NTT: Faster Dilithium, Kyber, and Saber on Cortex-A72 and Apple M1
  *   Becker, Hwang, Kannwischer, Yang, Yang
- *   https://tches.iacr.org/index.php/TCHES/article/view/9295
+ *   https://eprint.iacr.org/2021/986
  */
 
 /* Re-implementation of asymmetric base multiplication following @[NeonNTT] */
diff --git a/dev/aarch64_opt/src/polyvec_basemul_acc_montgomery_cached_asm_k4.S b/dev/aarch64_opt/src/polyvec_basemul_acc_montgomery_cached_asm_k4.S
@@ -9,7 +9,7 @@
  * - [NeonNTT]
  *   Neon NTT: Faster Dilithium, Kyber, and Saber on Cortex-A72 and Apple M1
  *   Becker, Hwang, Kannwischer, Yang, Yang
- *   https://tches.iacr.org/index.php/TCHES/article/view/9295
+ *   https://eprint.iacr.org/2021/986
  */
 
 /* Re-implementation of asymmetric base multiplication following @[NeonNTT] */
diff --git a/mlkem/native/aarch64/README.md b/mlkem/native/aarch64/README.md
@@ -12,5 +12,5 @@ and most preprocessor directives by [`scripts/simpasm`](../../../scripts/simpasm
 If you want to understand how the assembly works, and/or make changes to it, consult [dev/](../../../dev).
 
 <!--- bibliography --->
-[^NeonNTT]: Becker, Hwang, Kannwischer, Yang, Yang: Neon NTT: Faster Dilithium, Kyber, and Saber on Cortex-A72 and Apple M1, [https://tches.iacr.org/index.php/TCHES/article/view/9295](https://tches.iacr.org/index.php/TCHES/article/view/9295)
+[^NeonNTT]: Becker, Hwang, Kannwischer, Yang, Yang: Neon NTT: Faster Dilithium, Kyber, and Saber on Cortex-A72 and Apple M1, [https://eprint.iacr.org/2021/986](https://eprint.iacr.org/2021/986)
 [^SLOTHY_Paper]: Abdulrahman, Becker, Kannwischer, Klein: Fast and Clean: Auditable high-performance assembly via constraint solving, [https://eprint.iacr.org/2022/1303](https://eprint.iacr.org/2022/1303)
diff --git a/mlkem/native/aarch64/src/intt.S b/mlkem/native/aarch64/src/intt.S
@@ -29,7 +29,7 @@
  * - [NeonNTT]
  *   Neon NTT: Faster Dilithium, Kyber, and Saber on Cortex-A72 and Apple M1
  *   Becker, Hwang, Kannwischer, Yang, Yang
- *   https://tches.iacr.org/index.php/TCHES/article/view/9295
+ *   https://eprint.iacr.org/2021/986
  *
  * - [SLOTHY_Paper]
  *   Fast and Clean: Auditable high-performance assembly via constraint solving
diff --git a/mlkem/native/aarch64/src/ntt.S b/mlkem/native/aarch64/src/ntt.S
@@ -29,7 +29,7 @@
  * - [NeonNTT]
  *   Neon NTT: Faster Dilithium, Kyber, and Saber on Cortex-A72 and Apple M1
  *   Becker, Hwang, Kannwischer, Yang, Yang
- *   https://tches.iacr.org/index.php/TCHES/article/view/9295
+ *   https://eprint.iacr.org/2021/986
  *
  * - [SLOTHY_Paper]
  *   Fast and Clean: Auditable high-performance assembly via constraint solving
diff --git a/mlkem/native/aarch64/src/polyvec_basemul_acc_montgomery_cached_asm_k2.S b/mlkem/native/aarch64/src/polyvec_basemul_acc_montgomery_cached_asm_k2.S
@@ -9,7 +9,7 @@
  * - [NeonNTT]
  *   Neon NTT: Faster Dilithium, Kyber, and Saber on Cortex-A72 and Apple M1
  *   Becker, Hwang, Kannwischer, Yang, Yang
- *   https://tches.iacr.org/index.php/TCHES/article/view/9295
+ *   https://eprint.iacr.org/2021/986
  */
 
 /* Re-implementation of asymmetric base multiplication following @[NeonNTT] */
diff --git a/mlkem/native/aarch64/src/polyvec_basemul_acc_montgomery_cached_asm_k3.S b/mlkem/native/aarch64/src/polyvec_basemul_acc_montgomery_cached_asm_k3.S
@@ -9,7 +9,7 @@
  * - [NeonNTT]
  *   Neon NTT: Faster Dilithium, Kyber, and Saber on Cortex-A72 and Apple M1
  *   Becker, Hwang, Kannwischer, Yang, Yang
- *   https://tches.iacr.org/index.php/TCHES/article/view/9295
+ *   https://eprint.iacr.org/2021/986
  */
 
 /* Re-implementation of asymmetric base multiplication following @[NeonNTT] */
diff --git a/mlkem/native/aarch64/src/polyvec_basemul_acc_montgomery_cached_asm_k4.S b/mlkem/native/aarch64/src/polyvec_basemul_acc_montgomery_cached_asm_k4.S
@@ -9,7 +9,7 @@
  * - [NeonNTT]
  *   Neon NTT: Faster Dilithium, Kyber, and Saber on Cortex-A72 and Apple M1
  *   Becker, Hwang, Kannwischer, Yang, Yang
- *   https://tches.iacr.org/index.php/TCHES/article/view/9295
+ *   https://eprint.iacr.org/2021/986
  */
 
 /* Re-implementation of asymmetric base multiplication following @[NeonNTT] */
diff --git a/mlkem/poly.c b/mlkem/poly.c
@@ -9,7 +9,7 @@
  * - [NeonNTT]
  *   Neon NTT: Faster Dilithium, Kyber, and Saber on Cortex-A72 and Apple M1
  *   Becker, Hwang, Kannwischer, Yang, Yang
- *   https://tches.iacr.org/index.php/TCHES/article/view/9295
+ *   https://eprint.iacr.org/2021/986
  *
  * - [REF]
  *   CRYSTALS-Kyber C reference implementation
diff --git a/mlkem/poly_k.c b/mlkem/poly_k.c
@@ -14,7 +14,7 @@
  * - [NeonNTT]
  *   Neon NTT: Faster Dilithium, Kyber, and Saber on Cortex-A72 and Apple M1
  *   Becker, Hwang, Kannwischer, Yang, Yang
- *   https://tches.iacr.org/index.php/TCHES/article/view/9295
+ *   https://eprint.iacr.org/2021/986
  *
  * - [REF]
  *   CRYSTALS-Kyber C reference implementation
diff --git a/proofs/hol_light/arm/mlkem/mlkem_intt.S b/proofs/hol_light/arm/mlkem/mlkem_intt.S
@@ -29,7 +29,7 @@
  * - [NeonNTT]
  *   Neon NTT: Faster Dilithium, Kyber, and Saber on Cortex-A72 and Apple M1
  *   Becker, Hwang, Kannwischer, Yang, Yang
- *   https://tches.iacr.org/index.php/TCHES/article/view/9295
+ *   https://eprint.iacr.org/2021/986
  *
  * - [SLOTHY_Paper]
  *   Fast and Clean: Auditable high-performance assembly via constraint solving
diff --git a/proofs/hol_light/arm/mlkem/mlkem_ntt.S b/proofs/hol_light/arm/mlkem/mlkem_ntt.S
@@ -29,7 +29,7 @@
  * - [NeonNTT]
  *   Neon NTT: Faster Dilithium, Kyber, and Saber on Cortex-A72 and Apple M1
  *   Becker, Hwang, Kannwischer, Yang, Yang
- *   https://tches.iacr.org/index.php/TCHES/article/view/9295
+ *   https://eprint.iacr.org/2021/986
  *
  * - [SLOTHY_Paper]
  *   Fast and Clean: Auditable high-performance assembly via constraint solving
diff --git a/proofs/hol_light/arm/mlkem/mlkem_poly_basemul_acc_montgomery_cached_k2.S b/proofs/hol_light/arm/mlkem/mlkem_poly_basemul_acc_montgomery_cached_k2.S
@@ -9,7 +9,7 @@
  * - [NeonNTT]
  *   Neon NTT: Faster Dilithium, Kyber, and Saber on Cortex-A72 and Apple M1
  *   Becker, Hwang, Kannwischer, Yang, Yang
- *   https://tches.iacr.org/index.php/TCHES/article/view/9295
+ *   https://eprint.iacr.org/2021/986
  */
 
 /* Re-implementation of asymmetric base multiplication following @[NeonNTT] */
diff --git a/proofs/hol_light/arm/mlkem/mlkem_poly_basemul_acc_montgomery_cached_k3.S b/proofs/hol_light/arm/mlkem/mlkem_poly_basemul_acc_montgomery_cached_k3.S
@@ -9,7 +9,7 @@
  * - [NeonNTT]
  *   Neon NTT: Faster Dilithium, Kyber, and Saber on Cortex-A72 and Apple M1
  *   Becker, Hwang, Kannwischer, Yang, Yang
- *   https://tches.iacr.org/index.php/TCHES/article/view/9295
+ *   https://eprint.iacr.org/2021/986
  */
 
 /* Re-implementation of asymmetric base multiplication following @[NeonNTT] */
diff --git a/proofs/hol_light/arm/mlkem/mlkem_poly_basemul_acc_montgomery_cached_k4.S b/proofs/hol_light/arm/mlkem/mlkem_poly_basemul_acc_montgomery_cached_k4.S
@@ -9,7 +9,7 @@
  * - [NeonNTT]
  *   Neon NTT: Faster Dilithium, Kyber, and Saber on Cortex-A72 and Apple M1
  *   Becker, Hwang, Kannwischer, Yang, Yang
- *   https://tches.iacr.org/index.php/TCHES/article/view/9295
+ *   https://eprint.iacr.org/2021/986
  */
 
 /* Re-implementation of asymmetric base multiplication following @[NeonNTT] */

Original file line number	Diff line number	Diff line change
`@@ -29,7 +29,7 @@`
`29`	`29`	`* - [NeonNTT]`
`30`	`30`	`* Neon NTT: Faster Dilithium, Kyber, and Saber on Cortex-A72 and Apple M1`
`31`	`31`	`* Becker, Hwang, Kannwischer, Yang, Yang`
`32`		`- * https://tches.iacr.org/index.php/TCHES/article/view/9295`
	`32`	`+ * https://eprint.iacr.org/2021/986`
`33`	`33`	`*`
`34`	`34`	`* - [SLOTHY_Paper]`
`35`	`35`	`* Fast and Clean: Auditable high-performance assembly via constraint solving`