“High-Order Masking of NTRU”. 2023. IACR Transactions on Cryptographic Hardware and Embedded Systems 2023 (2): 180-211. https://doi.org/10.46586/tches.v2023.i2.180-211.