Cortex-M4 optimizations for {R,M} LWE schemes. (2020). IACR Transactions on Cryptographic Hardware and Embedded Systems, 2020(3), 336-357. https://doi.org/10.13154/tches.v2020.i3.336-357