Albrecht, Martin R., Christian Hanser, Andrea Hoeller, Thomas Pöppelmann, Fernando Virdia, and Andreas Wallner. “Implementing RLWE-Based Schemes Using an RSA Co-Processor”. IACR Transactions on Cryptographic Hardware and Embedded Systems 2019, no. 1 (November 9, 2018): 169–208. Accessed January 30, 2023. https://tches.iacr.org/index.php/TCHES/article/view/7338.