“Gadget-based Masking of Streamlined NTRU Prime Decapsulation in Hardware” (2023) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2024(1), pp. 1–26. doi:10.46586/tches.v2024.i1.1-26.