Cortex-M4 optimizations for {R,M} LWE schemes. TCHES. 2020;2020(3):336-357. doi:10.13154/tches.v2020.i3.336-357