High-order masking of NTRU. TCHES. 2023;2023(2):180-211. doi:10.46586/tches.v2023.i2.180-211