Attacking and Defending Masked Polynomial Comparison for Lattice-Based Cryptography. (2021). IACR Transactions on Cryptographic Hardware and Embedded Systems, 2021(3), 334-359. https://doi.org/10.46586/tches.v2021.i3.334-359