“Don’t Reject This: Key-Recovery Timing Attacks Due to Rejection-Sampling in HQC and BIKE”, TCHES, vol. 2022, no. 3, pp. 223–263, Jun. 2022, doi: 10.46586/tches.v2022.i3.223-263.