Saber: module-LWR based key exchange, CPA-secure encryption and CCA-secure KEM
scientific article; zbMATH DE number 6904724