2023. Quasi-linear masking against SCA and FIA, with cost amortization. IACR Transactions on Cryptographic Hardware and Embedded Systems. 2024, 1 (Dec. 2023), 398–432. DOI:https://doi.org/10.46586/tches.v2024.i1.398-432.