An Optimal Universal Construction for the Threshold Implementation of Bijective S-boxes.
Enrico PiccioneSamuele AndreoliLilya BudaghyanClaude CarletSiemen DhoogheSvetla NikovaGeorge PetridesVincent RijmenPublished in: IACR Cryptol. ePrint Arch. (2022)