“Higher-Order Lookup Table Masking in Essentially Constant Memory”. IACR Transactions on Cryptographic Hardware and Embedded Systems, vol. 2021, no. 4, Aug. 2021, pp. 546-8, https://doi.org/10.46586/tches.v2021.i4.546-586.