Albrecht MR, Hanser C, Hoeller A, Pöppelmann T, Virdia F, Wallner A. Implementing RLWE-based Schemes Using an RSA Co-Processor. TCHES. 2018;2019(1):169-208. doi:10.13154/tches.v2019.i1.169-208