[1]
B. Bilgin, L. De Meyer, S. Duval, I. Levi, and F.-X. Standaert, “Low AND Depth and Efficient Inverses: a Guide on S-boxes for Low-latency Masking”, ToSC, vol. 2020, no. 1, pp. 144-184, May 2020.