Multi-moduli NTTs for Saber on Cortex-M3 and Cortex-M4. TCHES. 2021;2022(1):127-151. doi:10.46586/tches.v2022.i1.127-151