“Cortex-M4 Optimizations for {R,M} LWE Schemes”. IACR Transactions on Cryptographic Hardware and Embedded Systems, vol. 2020, no. 3, June 2020, pp. 336-57, https://doi.org/10.13154/tches.v2020.i3.336-357.