A High-performance NTT/MSM Accelerator for Zero-knowledge Proof Using Load-balanced Fully-pipelined Montgomery Multiplier. TCHES. 2024;2025(1):275-313. doi:10.46586/tches.v2025.i1.275-313