2022. Adapting Belief Propagation to Counter Shuffling of NTTs. IACR Transactions on Cryptographic Hardware and Embedded Systems. 2023, 1 (Nov. 2022), 60–88. DOI:https://doi.org/10.46586/tches.v2023.i1.60-88.