{
   Rejection sampling for uniformly distributed public A matrix
   Memcheck:Cond
   fun:rej_uniform
   fun:pqcrystals_dilithium*_ref_poly_uniform
   fun:pqcrystals_dilithium*_ref_polyvec_matrix_expand
}
{
   Rejection sampling for s1 and s2
   Memcheck:Cond
   fun:rej_eta
   fun:pqcrystals_dilithium*_ref_poly_uniform_eta
   fun:pqcrystals_dilithium*_ref_polyvec*_uniform_eta
   fun:pqcrystals_dilithium*_ref_keypair
}
{
   Rejection sampling for y
   Memcheck:Cond
   fun:rej_gamma1m1
   fun:pqcrystals_dilithium*_ref_poly_uniform_gamma1m1
   fun:pqcrystals_dilithium*_ref_signature
}
{
   Rejection sampling for challenge
   Memcheck:Cond
   fun:pqcrystals_dilithium*_ref_poly_challenge
   fun:pqcrystals_dilithium*_ref_signature
}
{
   Rejection sampling for challenge
   Memcheck:Value8
   fun:pqcrystals_dilithium*_ref_poly_challenge
   fun:pqcrystals_dilithium*_ref_signature
}
{
   Rejection sampling for signature distribution
   Memcheck:Cond
   ...
   src:sign.c:150 # Call to polyvecl_chknorm
   # fun:pqcrystals_dilithium*_ref_signature
}
{
   Rejection sampling for signature distribution
   Memcheck:Cond
   ...
   src:sign.c:159 # Call to polyveck_chknorm
   # fun:pqcrystals_dilithium*_ref_signature
}
{
   Rejection sampling for signature distribution
   Memcheck:Cond
   ...
   src:sign.c:166 # Call to polyveck_chknorm
   # fun:pqcrystals_dilithium*_ref_signature
}
{
   Hint does not need to be computed in constant time
   Memcheck:Cond
   ...
   src:sign.c:170 # Call to polyveck_make_hint
   # fun:pqcrystals_dilithium*_ref_signature
}
{
   Rejection sampling for hint
   Memcheck:Cond
   ...
   src:sign.c:171 # Checking number of 1 bits in hint
   # fun:pqcrystals_dilithium*_ref_signature
}
{
   Packing routines do not need to be constant time
   Memcheck:Cond
   fun:pqcrystals_dilithium*_ref_pack_sig
   fun:pqcrystals_dilithium*_ref_signature
}
{
   Verification is not done in constant time
   Memcheck:Cond
   fun:pqcrystals_dilithium*_ref_verify
}
