Bilgin, Begül, et al. “Low AND Depth and Efficient Inverses: A Guide on S-Boxes for Low-Latency Masking”. IACR Transactions on Symmetric Cryptology, vol. 2020, no. 1, May 2020, pp. 144-8, https://doi.org/10.13154/tosc.v2020.i1.144-184.