2022. Verified NTT Multiplications for NISTPQC KEM Lattice Finalists: Kyber, SABER, and NTRU. IACR Transactions on Cryptographic Hardware and Embedded Systems. 2022, 4 (Aug. 2022), 718–750. DOI:https://doi.org/10.46586/tches.v2022.i4.718-750.