Method _compute_mu

tests/hazmat/primitives/test_mldsa.py:172–177

(pub_raw: bytes, data: bytes, ctx: bytes = b"")

    @staticmethod
    def _compute_mu(pub_raw: bytes, data: bytes, ctx: bytes = b"") -> bytes:
        # FIPS 204: mu = SHAKE256(SHAKE256(pk, 64) || M', 64) where for pure
        # ML-DSA M' = 0x00 || len(ctx) || ctx || M.
        tr = hashlib.shake_256(pub_raw).digest(64)
        m_prime = b"\x00" + bytes([len(ctx)]) + ctx + data
        return hashlib.shake_256(tr + m_prime).digest(64)

    @pytest.mark.parametrize("variant", ML_DSA_VARIANTS)
    def test_sign_verify_mu(self, variant, backend):