A hardware accelerator for the one operation ML-KEM's post-quantum key-encapsulation scheme spends most of its time on: multiplying two polynomials modulo over . It transforms both polynomials with a number-theoretic transform, multiplies pointwise in the transformed domain, and transforms back, the same divide-and-conquer idea as an FFT, over a finite field instead of the complex numbers. Two independent transform engines and a base-multiplication unit are exposed as a memory-mapped AXI-Lite peripheral.
