B. Bilgin, L. De Meyer, S. Duval, I. Levi, and F.-X. . Standaert, “Low AND Depth and Efficient Inverses: a Guide on S-boxes for Low-latency Masking”, ToSC, vol. 2020, no. 1, pp. 144–184, May 2020.