E. Alkim, Y. Alper Bilgin, M. Cenk, and F. Gérard, “Cortex-M4 optimizations for {R,M} LWE schemes”, TCHES, vol. 2020, no. 3, pp. 336–357, Jun. 2020.