S. Bhasin, J.-P. D’Anvers, D. Heinz, T. Pöppelmann, and M. Van Beirendonck, “Attacking and Defending Masked Polynomial Comparison for Lattice-Based Cryptography”, TCHES, vol. 2021, no. 3, pp. 334–359, Jul. 2021.