BAT: Small and Fast KEM over NTRU Lattices. TCHES. 2022;2022(2):240-265. doi:10.46586/tches.v2022.i2.240-265