“Pasta: A Case for Hybrid Homomorphic Encryption” (2023) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2023(3), pp. 30–73. doi:10.46586/tches.v2023.i3.30-73.