BILGIN, B.; DE MEYER, L.; DUVAL, S.; LEVI, I.; STANDAERT, F.-X. Low AND Depth and Efficient Inverses: a Guide on S-boxes for Low-latency Masking. IACR Transactions on Symmetric Cryptology, v. 2020, n. 1, p. 144-184, 7 May 2020.