“Practical CCA2-Secure and Masked Ring-LWE Implementation”. 2018. IACR Transactions on Cryptographic Hardware and Embedded Systems 2018 (1): 142-74. https://doi.org/10.13154/tches.v2018.i1.142-174.