2022. Don’t Reject This: Key-Recovery Timing Attacks Due to Rejection-Sampling in HQC and BIKE. IACR Transactions on Cryptographic Hardware and Embedded Systems. 2022, 3 (Jun. 2022), 223–263. DOI:https://doi.org/10.46586/tches.v2022.i3.223-263.