Practical CCA2-Secure and Masked Ring-LWE Implementation. TCHES. 2018;2018(1):142-174. doi:10.13154/tches.v2018.i1.142-174