“A Constant-time AVX2 Implementation of a Variant of ROLLO”, TCHES, vol. 2022, no. 1, pp. 152–174, Nov. 2021, doi: 10.46586/tches.v2022.i1.152-174.