“Polynomial sharings on two secrets: Buy one, get one free” (2024) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2024(3), pp. 671–706. doi:10.46586/tches.v2024.i3.671-706.