“Practical CCA2-Secure and Masked Ring-LWE Implementation”. IACR Transactions on Cryptographic Hardware and Embedded Systems, vol. 2018, no. 1, Feb. 2018, pp. 142-74, https://doi.org/10.13154/tches.v2018.i1.142-174.