Low AND Depth and Efficient Inverses: a Guide on S-boxes for Low-latency Masking. (2020). IACR Transactions on Symmetric Cryptology, 2020(1), 144-184. https://doi.org/10.13154/tosc.v2020.i1.144-184