“Practical CCA2-Secure and Masked Ring-LWE Implementation”, TCHES, vol. 2018, no. 1, pp. 142–174, Feb. 2018, doi: 10.13154/tches.v2018.i1.142-174.