“Multi-Moduli NTTs for Saber on Cortex-M3 and Cortex-M4”. 2021. IACR Transactions on Cryptographic Hardware and Embedded Systems 2022 (1): 127-51. https://doi.org/10.46586/tches.v2022.i1.127-151.