Saber on ARM CCA-secure module lattice-based key encapsulation on ARM
High-Throughput Ring-LWE Cryptoprocessors