“Formally Verifying Kyber: Episode IV: Implementation Correctness”. 2023. IACR Transactions on Cryptographic Hardware and Embedded Systems 2023 (3): 164-93. https://doi.org/10.46586/tches.v2023.i3.164-193.