Alkim, Erdem, et al. “Cortex-M4 Optimizations for {R,M} LWE Schemes”. IACR Transactions on Cryptographic Hardware and Embedded Systems, vol. 2020, no. 3, June 2020, pp. 336-57, doi:10.13154/tches.v2020.i3.336-357.