High-order masking of NTRU. (2023). IACR Transactions on Cryptographic Hardware and Embedded Systems, 2023(2), 180-211. https://doi.org/10.46586/tches.v2023.i2.180-211