“Redundant Code-based Masking Revisited” (2020) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2021(1), pp. 426–450. doi:10.46586/tches.v2021.i1.426-450.