Practical CCA2-Secure and Masked Ring-LWE Implementation. TCHES 2018, 2018 (1), 142-174. https://doi.org/10.13154/tches.v2018.i1.142-174.