“Chosen Ciphertext k-Trace Attacks on Masked CCA2 Secure Kyber” (2021) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2021(4), pp. 88–113. doi:10.46586/tches.v2021.i4.88-113.