From: A secure and highly efficient first-order masking scheme for AES linear operations
Number of cycles
Speedup
RSMv2
Our Proposal
27,001
21,287
26.84%