Verified NTT Multiplications for NISTPQC KEM Lattice Finalists: Kyber, SABER, and NTRU. TCHES. 2022;2022(4):718-750. doi:10.46586/tches.v2022.i4.718-750