“Attacking and Defending Masked Polynomial Comparison for Lattice-Based Cryptography” (2021) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2021(3), pp. 334–359. doi:10.46586/tches.v2021.i3.334-359.