A Constant-time AVX2 Implementation of a Variant of ROLLO. TCHES. 2021;2022(1):152-174. doi:10.46586/tches.v2022.i1.152-174