“High-Speed Masking for Polynomial Comparison in Lattice-Based KEMs”. IACR Transactions on Cryptographic Hardware and Embedded Systems, vol. 2020, no. 3, June 2020, pp. 483-07, https://doi.org/10.13154/tches.v2020.i3.483-507.