“Mixing Additive and Multiplicative Masking for Probing Secure Polynomial Evaluation Methods” (2018) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2018(1), pp. 175–208. doi:10.13154/tches.v2018.i1.175-208.