Higher-Order Lookup Table Masking in Essentially Constant Memory. (2021). IACR Transactions on Cryptographic Hardware and Embedded Systems, 2021(4), 546-586. https://doi.org/10.46586/tches.v2021.i4.546-586