“High-Speed Masking for Polynomial Comparison in Lattice-Based KEMs”. IACR Transactions on Cryptographic Hardware and Embedded Systems 2020, no. 3 (June 19, 2020): 483–507. Accessed January 5, 2025. https://metalla.org/index.php/TCHES/article/view/8598.