Bilgin, B., L. De Meyer, S. Duval, I. Levi, and F.-X. Standaert. “Low AND Depth and Efficient Inverses: A Guide on S-Boxes for Low-Latency Masking”. IACR Transactions on Symmetric Cryptology, Vol. 2020, no. 1, May 2020, pp. 144-8, doi:10.13154/tosc.v2020.i1.144-184.