M. Hamburg, “Chosen Ciphertext k-Trace Attacks on Masked CCA2 Secure Kyber”, TCHES, vol. 2021, no. 4, pp. 88–113, Aug. 2021.