“Multiplying Polynomials without Powerful Multiplication Instructions” (2024) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2025(1), pp. 160–202. doi:10.46586/tches.v2025.i1.160-202.