“Breaking Masked Implementations with Many Shares on 32-bit Software Platforms: or When the Security Order Does Not Matter” (2021) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2021(3), pp. 202–234. doi:10.46586/tches.v2021.i3.202-234.