Saber on ARM: CCA-Secure Module Lattice-Based Key Encapsulation on ARM. TCHES 2018, 2018 (3), 243-266. https://doi.org/10.13154/tches.v2018.i3.243-266.