2023. High-order masking of NTRU. IACR Transactions on Cryptographic Hardware and Embedded Systems. 2023, 2 (Mar. 2023), 180–211. DOI:https://doi.org/10.46586/tches.v2023.i2.180-211.