N. Costes and M. Stam. “Redundant Code-based Masking Revisited”. IACR Transactions on Cryptographic Hardware and Embedded Systems, 2021 (1), 426-450.