{
   Rejection sampling for uniformly distributed public A matrix
   Memcheck:Cond
   fun:rej_uniform
   fun:pqcrystals_ml_dsa*_ref_poly_uniform
   fun:pqcrystals_ml_dsa*_ref_polyvec_matrix_expand
}
{
   Rejection sampling for s1 and s2
   Memcheck:Cond
   fun:rej_eta
   fun:pqcrystals_ml_dsa*_ref_poly_uniform_eta
   fun:pqcrystals_ml_dsa*_ref_polyvec*_uniform_eta
   fun:pqcrystals_ml_dsa*_ref_keypair
}
{
   Rejection sampling for y
   Memcheck:Cond
   fun:rej_gamma1m1
   fun:pqcrystals_ml_dsa*_ref_poly_uniform_gamma1m1
   fun:pqcrystals_ml_dsa*_ref_signature_internal
}
{
   Rejection sampling for challenge
   Memcheck:Cond
   fun:pqcrystals_ml_dsa*_ref_poly_challenge
   fun:pqcrystals_ml_dsa*_ref_signature_internal
}
{
   Rejection sampling for challenge
   Memcheck:Value8
   fun:pqcrystals_ml_dsa*_ref_poly_challenge
   fun:pqcrystals_ml_dsa*_ref_signature_internal
}
{
   Rejection sampling for signature distribution
   Memcheck:Cond
   ...
   src:sign.c:161 # Call to polyvecl_chknorm
   # fun:pqcrystals_ml_dsa*_ref_signature
}
{
   Rejection sampling for signature distribution
   Memcheck:Cond
   ...
   src:sign.c:170 # Call to polyveck_chknorm
   # fun:pqcrystals_ml_dsa*_ref_signature
}
{
   Rejection sampling for signature distribution
   Memcheck:Cond
   ...
   src:sign.c:177 # Call to polyveck_chknorm
   # fun:pqcrystals_ml_dsa*_ref_signature
}
{
   Hint does not need to be computed in constant time
   Memcheck:Cond
   ...
   src:sign.c:181 # Call to polyveck_make_hint
   # fun:pqcrystals_ml_dsa*_ref_signature
}
{
   Rejection sampling for hint
   Memcheck:Cond
   ...
   src:sign.c:182 # Checking number of 1 bits in hint
   # fun:pqcrystals_ml_dsa*_ref_signature
}
{
   Packing routines do not need to be constant time
   Memcheck:Cond
   fun:pqcrystals_ml_dsa*_ref_pack_sig
   fun:pqcrystals_ml_dsa*_ref_signature
}
{
   Verification is not done in constant time
   Memcheck:Cond
   fun:pqcrystals_ml_dsa*_ref_verify_internal
}
