Saber on ARM: CCA-secure module lattice-based key encapsulation on ARM. (2018). IACR Transactions on Cryptographic Hardware and Embedded Systems, 2018(3), 243-266. https://doi.org/10.13154/tches.v2018.i3.243-266