Attacking and Defending Masked Polynomial Comparison for Lattice-Based Cryptography. TCHES. 2021;2021(3):334-359. doi:10.46586/tches.v2021.i3.334-359