“A Low-Latency High-Order Arithmetic to Boolean Masking Conversion” (2024) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2024(2), pp. 630–653. doi:10.46586/tches.v2024.i2.630-653.