Formally verifying Kyber: Episode IV: Implementation correctness. (2023). IACR Transactions on Cryptographic Hardware and Embedded Systems, 2023(3), 164-193. https://doi.org/10.46586/tches.v2023.i3.164-193