2021. A Constant-time AVX2 Implementation of a Variant of ROLLO. IACR Transactions on Cryptographic Hardware and Embedded Systems. 2022, 1 (Nov. 2021), 152–174. DOI:https://doi.org/10.46586/tches.v2022.i1.152-174.