“Higher-Order Lookup Table Masking in Essentially Constant Memory”. 2021. IACR Transactions on Cryptographic Hardware and Embedded Systems 2021 (4): 546-86. https://doi.org/10.46586/tches.v2021.i4.546-586.