“Cortex-M4 optimizations for {R,M} LWE schemes” (2020) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2020(3), pp. 336–357. doi:10.13154/tches.v2020.i3.336-357.