Breaking Masked Implementations with Many Shares on 32-bit Software Platforms: or When the Security Order Does Not Matter. (2021). IACR Transactions on Cryptographic Hardware and Embedded Systems, 2021(3), 202-234. https://doi.org/10.46586/tches.v2021.i3.202-234