“A Constant-Time AVX2 Implementation of a Variant of ROLLO”. 2021. IACR Transactions on Cryptographic Hardware and Embedded Systems 2022 (1): 152-74. https://doi.org/10.46586/tches.v2022.i1.152-174.