NTT Multiplication for NTT-unfriendly Rings: New Speed Records for Saber and NTRU on Cortex-M4 and AVX2. TCHES. 2021;2021(2):159-188. doi:10.46586/tches.v2021.i2.159-188