2021. Higher-Order Lookup Table Masking in Essentially Constant Memory. IACR Transactions on Cryptographic Hardware and Embedded Systems. 2021, 4 (Aug. 2021), 546–586. DOI:https://doi.org/10.46586/tches.v2021.i4.546-586.