2008
A Very Compact "Perfectly Masked" S-Box for AES
D. Canright and Lejla Batina
"A Very Compact Perfectly Masked S-Box for AES"
in Applied Cryptography and Network Security (ACNS2008), Lecture Notes in Computer Science 5037, pp. 446--459, 2008, Springer-Verlag.