Efficient Ring-LWE Encryption on 8-Bit AVR Processors
High-speed Curve25519 on 8-bit, 16-bit, and 32-bit microcontrollers