“Improved Gadgets for the High-Order Masking of Dilithium” (2023) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2023(4), pp. 110–145. doi:10.46586/tches.v2023.i4.110-145.