“Standard Lattice-Based Key Encapsulation on Embedded Devices” (2018) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2018(3), pp. 372–393. doi:10.13154/tches.v2018.i3.372-393.