“Verified NTT Multiplications for NISTPQC KEM Lattice Finalists: Kyber, SABER, and NTRU”. 2022. IACR Transactions on Cryptographic Hardware and Embedded Systems 2022 (4): 718-50. https://doi.org/10.46586/tches.v2022.i4.718-750.