“Quasi-Linear Masking Against SCA and FIA, With Cost Amortization”. 2023. IACR Transactions on Cryptographic Hardware and Embedded Systems 2024 (1): 398-432. https://doi.org/10.46586/tches.v2024.i1.398-432.