Formally verifying Kyber Episode IV: Implementation correctness
by José Bacelar Almeida and
Manuel Barbosa and
Gilles Barthe and
Benjamin Grégoire and
Vincent Laporte and
Jean-Christophe Léchenet and
Tiago Oliveira and
Hugo Pacheco and
Miguel Quaresma and
Peter Schwabe and
Antoine Séré and
Pierre-Yves Strub