“Improved High-Order Conversion From Boolean to Arithmetic Masking” (2018) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2018(2), pp. 22–45. doi:10.13154/tches.v2018.i2.22-45.