See Figure 4a in https://eprint.iacr.org/2021/1574.pdf
See Section 3.2 and Table 4 in https://eprint.iacr.org/2021/1574.pdf