2020. Low AND Depth and Efficient Inverses: a Guide on S-boxes for Low-latency Masking. IACR Transactions on Symmetric Cryptology. 2020, 1 (May 2020), 144–184. DOI:https://doi.org/10.13154/tosc.v2020.i1.144-184.