“BAT: Small and Fast KEM over NTRU Lattices” (2022) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2022(2), pp. 240–265. doi:10.46586/tches.v2022.i2.240-265.