“Cortex-M4 Optimizations for {R,M} LWE Schemes”. 2020. IACR Transactions on Cryptographic Hardware and Embedded Systems 2020 (3): 336-57. https://doi.org/10.13154/tches.v2020.i3.336-357.