“Bitslicing Arithmetic Boolean Masking Conversions for Fun and Profit: With Application to Lattice-Based KEMs”. 2022. IACR Transactions on Cryptographic Hardware and Embedded Systems 2022 (4): 553-88. https://doi.org/10.46586/tches.v2022.i4.553-588.