“Multiple-Valued Plaintext-Checking Side-Channel Attacks on Post-Quantum KEMs” (2023) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2023(3), pp. 473–503. doi:10.46586/tches.v2023.i3.473-503.