Implementing RLWE-Based Schemes Using an RSA Co-Processor. TCHES 2018, 2019 (1), 169-208. https://doi.org/10.13154/tches.v2019.i1.169-208.