Implementing RLWE-based Schemes Using an RSA Co-Processor. TCHES. 2018;2019(1):169-208. doi:10.13154/tches.v2019.i1.169-208