[1]
M. R. Albrecht, C. Hanser, A. Hoeller, T. Pöppelmann, F. Virdia, and A. Wallner, “Implementing RLWE-based Schemes Using an RSA Co-Processor”, TCHES, vol. 2019, no. 1, pp. 169–208, Nov. 2018.