A High-performance NTT/MSM Accelerator for Zero-knowledge Proof Using Load-balanced Fully-pipelined Montgomery Multiplier. (2024). IACR Transactions on Cryptographic Hardware and Embedded Systems, 2025(1), 275-313. https://doi.org/10.46586/tches.v2025.i1.275-313