Saber on ARM: CCA-secure module lattice-based key encapsulation on ARM. TCHES. 2018;2018(3):243-266. doi:10.13154/tches.v2018.i3.243-266