“High-order Polynomial Comparison and Masking Lattice-based Encryption” (2022) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2023(1), pp. 153–192. doi:10.46586/tches.v2023.i1.153-192.