Reducing the number of non-linear multiplications in masking schemes
scientific article; zbMATH DE number 6838316