Fig. 9From: A secure and highly efficient first-order masking scheme for AES linear operationsFirst-order attacks on software RSMv2 implementation after combining our proposalBack to article page