“Verified NTT Multiplications for NISTPQC KEM Lattice Finalists: Kyber, SABER, and NTRU” (2022) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2022(4), pp. 718–750. doi:10.46586/tches.v2022.i4.718-750.