“High-order masking of NTRU” (2023) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2023(2), pp. 180–211. doi:10.46586/tches.v2023.i2.180-211.