Hwang, Vincent, et al. “Verified NTT Multiplications for NISTPQC KEM Lattice Finalists: Kyber, SABER, and NTRU”. IACR Transactions on Cryptographic Hardware and Embedded Systems, vol. 2022, no. 4, Aug. 2022, pp. 718-50, doi:10.46586/tches.v2022.i4.718-750.