[1]
T. Chou and J.-H. Liou, “A Constant-time AVX2 Implementation of a Variant of ROLLO”, TCHES, vol. 2022, no. 1, pp. 152–174, Nov. 2021.