Neon NTT: Faster Dilithium, Kyber, and Saber on Cortex-A72 and Apple M1. TCHES. 2021;2022(1):221-244. doi:10.46586/tches.v2022.i1.221-244