Bacelar Almeida, José, et al. “Formally Verifying Kyber: Episode IV: Implementation Correctness”. IACR Transactions on Cryptographic Hardware and Embedded Systems, vol. 2023, no. 3, June 2023, pp. 164-93, doi:10.46586/tches.v2023.i3.164-193.