Lyubashevsky, V.; Seiler, G. NTTRU: Truly Fast NTRU Using NTT. TCHES 2019, 2019, 180-201.