“Implementing RLWE-based Schemes Using an RSA Co-Processor” (2018) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2019(1), pp. 169–208. doi:10.13154/tches.v2019.i1.169-208.