Albrecht, M. R.; Hanser, C.; Hoeller, A.; Pöppelmann, T.; Virdia, F.; Wallner, A. Implementing RLWE-Based Schemes Using an RSA Co-Processor. TCHES 2018, 2019, 169-208.