“Quasi-linear masking against SCA and FIA, with cost amortization” (2023) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2024(1), pp. 398–432. doi:10.46586/tches.v2024.i1.398-432.