2020. High-Speed Masking for Polynomial Comparison in Lattice-based KEMs. IACR Transactions on Cryptographic Hardware and Embedded Systems. 2020, 3 (Jun. 2020), 483–507. DOI:https://doi.org/10.13154/tches.v2020.i3.483-507.