Quasi-linear masking against SCA and FIA, with cost amortization. (2023). IACR Transactions on Cryptographic Hardware and Embedded Systems, 2024(1), 398-432. https://doi.org/10.46586/tches.v2024.i1.398-432