“Bitslice Masking and Improved Shuffling:: How and When to Mix Them in Software?” (2022) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2022(2), pp. 140–165. doi:10.46586/tches.v2022.i2.140-165.