“NTT Multiplication for NTT-unfriendly Rings: New Speed Records for Saber and NTRU on Cortex-M4 and AVX2” (2021) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2021(2), pp. 159–188. doi:10.46586/tches.v2021.i2.159-188.