Fig. 7From: A secure and highly efficient first-order masking scheme for AES linear operationsThe masks in our first-order masking schemeBack to article page