“Saber on ARM: CCA-secure module lattice-based key encapsulation on ARM” (2018) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2018(3), pp. 243–266. doi:10.13154/tches.v2018.i3.243-266.