2018. Implementing RLWE-based Schemes Using an RSA Co-Processor. IACR Transactions on Cryptographic Hardware and Embedded Systems. 2019, 1 (Nov. 2018), 169–208. DOI:https://doi.org/10.13154/tches.v2019.i1.169-208.