Slicing Bits and Cutting Costs in CDT Sampling: High-Order Masking of FrodoKEM's Gaussian Sampler, Revisited eprint.iacr.org
Masked Gaussian sampling gets expensive fast; this paper trims FrodoKEM CDT costs with bitslicing for arbitrary orders.
trending2
01 02 Can AEGIS be bitsliced without becoming a crime scene? This paper says yes, with CT ARM, RISC-V, wasm, and JS code.