Masking proofs are tight and how to exploit it in security evaluations
scientific article; zbMATH DE number 6900709