“Attacking and Defending Masked Polynomial Comparison for Lattice-Based Cryptography”. 2021. IACR Transactions on Cryptographic Hardware and Embedded Systems 2021 (3): 334-59. https://doi.org/10.46586/tches.v2021.i3.334-359.