“Multiplying Polynomials Without Powerful Multiplication Instructions”. IACR Transactions on Cryptographic Hardware and Embedded Systems, vol. 2025, no. 1, Dec. 2024, pp. 160-02, https://doi.org/10.46586/tches.v2025.i1.160-202.