“Improved High-Order Masked Generation of Masking Vector and Rejection Sampling in Dilithium” (2024) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2024(4), pp. 335–354. doi:10.46586/tches.v2024.i4.335-354.