[1]
“Low AND Depth and Efficient Inverses: a Guide on S-boxes for Low-latency Masking”, ToSC, vol. 2020, no. 1, pp. 144–184, May 2020, doi: 10.13154/tosc.v2020.i1.144-184.