“Bitslice Masking and Improved Shuffling:: How and When to Mix Them in Software?”. IACR Transactions on Cryptographic Hardware and Embedded Systems, vol. 2022, no. 2, Feb. 2022, pp. 140-65, https://doi.org/10.46586/tches.v2022.i2.140-165.