“Low AND Depth and Efficient Inverses: a Guide on S-boxes for Low-latency Masking” (2020) IACR Transactions on Symmetric Cryptology, 2020(1), pp. 144–184. doi:10.13154/tosc.v2020.i1.144-184.