“Improved High-Order Conversion From Boolean to Arithmetic Masking”. IACR Transactions on Cryptographic Hardware and Embedded Systems, vol. 2018, no. 2, May 2018, pp. 22-45, https://doi.org/10.13154/tches.v2018.i2.22-45.