“Multiplying Polynomials Without Powerful Multiplication Instructions”. 2024. IACR Transactions on Cryptographic Hardware and Embedded Systems 2025 (1): 160-202. https://doi.org/10.46586/tches.v2025.i1.160-202.