2020. Cortex-M4 optimizations for {R,M} LWE schemes. IACR Transactions on Cryptographic Hardware and Embedded Systems. 2020, 3 (Jun. 2020), 336–357. DOI:https://doi.org/10.13154/tches.v2020.i3.336-357.