“High-Speed Masking for Polynomial Comparison in Lattice-based KEMs” (2020) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2020(3), pp. 483–507. doi:10.13154/tches.v2020.i3.483-507.