High-order Polynomial Comparison and Masking Lattice-based Encryption. (2022). IACR Transactions on Cryptographic Hardware and Embedded Systems, 2023(1), 153-192. https://doi.org/10.46586/tches.v2023.i1.153-192