{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,15]],"date-time":"2026-10-15T22:38:52Z","timestamp":1792103932774,"version":"4.4.0"},"reference-count":41,"publisher":"Springer Science and Business Media LLC","issue":"11","license":[{"start":{"date-parts":[[2023,7,22]],"date-time":"2023-07-22T00:00:00Z","timestamp":1689984000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2023,7,22]],"date-time":"2023-07-22T00:00:00Z","timestamp":1689984000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"funder":[{"DOI":"10.13039\/501100001809","name":"Natural Science Foundation of China","doi-asserted-by":"crossref","award":["62102135"],"award-info":[{"award-number":["62102135"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/501100001809","name":"National Science Foundation of China","doi-asserted-by":"crossref","award":["62072161"],"award-info":[{"award-number":["62072161"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Des. Codes Cryptogr."],"published-print":{"date-parts":[[2023,11]]},"DOI":"10.1007\/s10623-023-01266-w","type":"journal-article","created":{"date-parts":[[2023,7,22]],"date-time":"2023-07-22T10:01:34Z","timestamp":1690020094000},"page":"3709-3739","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["A further study on bridge structures and constructing bijective S-boxes for low-latency masking"],"prefix":"10.1007","volume":"91","author":[{"given":"Shizhu","family":"Tian","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yitong","family":"Liu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8351-8766","authenticated-orcid":false,"given":"Xiangyong","family":"Zeng","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2023,7,22]]},"reference":[{"key":"1266_CR1","volume-title":"A New 128-bit Block Cipher","author":"F Ali","year":"2009","unstructured":"Ali F., Hani F.A.: A New 128-bit Block Cipher. Universiti Putra Malaysia, Selangor (2009)."},{"key":"1266_CR2","unstructured":"Baksi, A., Guilley, S., Shrivastwa, R.R., Takarabt, S.: From substitution box to threshold. Cryptology ePrint Archive, Report 2023\/633 (2023). https:\/\/eprint.iacr.org\/2023\/633"},{"issue":"1","key":"1266_CR3","doi-asserted-by":"publisher","first-page":"330","DOI":"10.46586\/tosc.v2019.i1.330-394","volume":"2019","author":"Z Bao","year":"2019","unstructured":"Bao Z., Guo J., Ling S., Sasaki Y.: PEIGEN-a platform for evaluation, implementation, and generation of S-boxes. IACR Trans. Symmetric Cryptol. 2019(1), 330\u2013394 (2019).","journal-title":"IACR Trans. Symmetric Cryptol."},{"key":"1266_CR4","doi-asserted-by":"crossref","unstructured":"Biham, E., Shamir, A.: Differential cryptanalysis of DES-like cryptosystems. In: Advances in Cryptology\u2013CRYPTO \u201990, 10th Annual International Cryptology Conference, Santa Barbara, California, USA, August 11-15, 1990, Proceedings, Lecture Notes in Computer Science, vol. 537, pp. 2\u201321. Springer (1990)","DOI":"10.1007\/3-540-38424-3_1"},{"key":"1266_CR5","unstructured":"Bilgin, B.: Threshold implementations: as countermeasure against higher-order differential power analysis. Ph.D. thesis, University of Twente, Enschede (2015)"},{"issue":"1","key":"1266_CR6","doi-asserted-by":"publisher","first-page":"144","DOI":"10.46586\/tosc.v2020.i1.144-184","volume":"2020","author":"B Bilgin","year":"2020","unstructured":"Bilgin B., Meyer L.D., Duval S., Levi I., Standaert F.: Low AND depth and efficient inverses: a guide on S-boxes for low-latency masking. IACR Trans. Symmetric Cryptol. 2020(1), 144\u2013184 (2020).","journal-title":"IACR Trans. Symmetric Cryptol."},{"key":"1266_CR7","doi-asserted-by":"crossref","unstructured":"Bilgin, B., Nikova, S., Nikov, V., Rijmen, V., St\u00fctz, G.: Threshold implementations of all $$3\\times 3$$ and $$4\\times 4$$ S-boxes. In: Cryptographic Hardware and Embedded Systems\u2013CHES 2012\u201314th International Workshop, Leuven, Belgium, September 9-12, 2012. Proceedings, Lecture Notes in Computer Science, vol. 7428, pp. 76\u201391. Springer (2012)","DOI":"10.1007\/978-3-642-33027-8_5"},{"issue":"2","key":"1266_CR8","doi-asserted-by":"publisher","first-page":"149","DOI":"10.1007\/s13389-017-0156-7","volume":"7","author":"E Boss","year":"2017","unstructured":"Boss E., Grosso V., G\u00fcneysu T., Leander G., Moradi A., Schneider T.: Strong 8-bit Sboxes with efficient masking in hardware extended version. J. Cryptogr. Eng. 7(2), 149\u2013165 (2017).","journal-title":"J. Cryptogr. Eng."},{"key":"1266_CR9","unstructured":"Canni\u00e8re, C.D.: Analysis and design of symmetric encryption algorithms. Ph.D. thesis, Katholieke Universiteit Leuven (2007)"},{"key":"1266_CR10","doi-asserted-by":"crossref","unstructured":"Canteaut, A., Duval, S., Leurent, G.: Construction of lightweight S-boxes using Feistel and MISTY structures. In: Selected Areas in Cryptography\u2013SAC 2015\u201322nd International Conference, Sackville, NB, Canada, August 12-14, 2015, Revised Selected Papers, Lecture Notes in Computer Science, vol. 9566, pp. 373\u2013393. Springer (2015)","DOI":"10.1007\/978-3-319-31301-6_22"},{"issue":"11","key":"1266_CR11","doi-asserted-by":"publisher","first-page":"7575","DOI":"10.1109\/TIT.2017.2676807","volume":"63","author":"A Canteaut","year":"2017","unstructured":"Canteaut A., Duval S., Perrin L.: A generalisation of Dillon\u2019s APN permutation with the best known differential and nonlinear properties for all fields of size $$2^{4k+2}$$. IEEE Trans. Inf. Theory 63(11), 7575\u20137591 (2017).","journal-title":"IEEE Trans. Inf. Theory"},{"key":"1266_CR12","doi-asserted-by":"publisher","first-page":"209","DOI":"10.1016\/j.ffa.2018.11.008","volume":"56","author":"A Canteaut","year":"2019","unstructured":"Canteaut A., Perrin L.: On CCZ-equivalence, extended-affine equivalence, and function twisting. Finite Fields Their Appl. 56, 209\u2013246 (2019).","journal-title":"Finite Fields Their Appl."},{"key":"1266_CR13","doi-asserted-by":"crossref","unstructured":"Carlet, C. (ed.): Boolean Functions for Cryptography and Coding Theory. Cambridge University Press (2021)","DOI":"10.1017\/9781108606806"},{"key":"1266_CR14","doi-asserted-by":"crossref","unstructured":"Chabaud, F., Vaudenay, S.: Links between differential and linear cryptanalysis. In: Advances in Cryptology\u2013EUROCRYPT \u201994, Workshop on the Theory and Application of Cryptographic Techniques, Perugia, Italy, May 9-12, 1994, Proceedings, Lecture Notes in Computer Science, vol. 950, pp. 356\u2013365. Springer (1994)","DOI":"10.1007\/BFb0053450"},{"key":"1266_CR15","doi-asserted-by":"crossref","unstructured":"Chari, S., Jutla, C.S., Rao, J.R., Rohatgi, P.: Towards sound approaches to counteract power-analysis attacks. In: Advances in Cryptology - CRYPTO \u201999, 19th Annual International Cryptology Conference, Santa Barbara, California, USA, August 15-19, 1999, Proceedings, Lecture Notes in Computer Science, vol. 1666, pp. 398\u2013412. Springer (1999)","DOI":"10.1007\/3-540-48405-1_26"},{"issue":"2","key":"1266_CR16","doi-asserted-by":"publisher","first-page":"139","DOI":"10.1007\/s002000050099","volume":"9","author":"H Dobbertin","year":"1998","unstructured":"Dobbertin H.: One-to-one highly nonlinear power functions on $$\\rm GF(2^n)$$. Appl. Algebra Eng. Commun. Comput. 9(2), 139\u2013152 (1998).","journal-title":"Appl. Algebra Eng. Commun. Comput."},{"key":"1266_CR17","unstructured":"ETSI\/Sage: Specification of the 3GPP Confidentiality and Integrity Algorithms 128-EEA3 & 128-EIA3. Document 4: Design and Evaluation Report. Technical report ETSI\/Sage (2011)"},{"issue":"5","key":"1266_CR18","doi-asserted-by":"publisher","first-page":"15","DOI":"10.1038\/scientificamerican0573-15","volume":"228","author":"H Feistel","year":"1973","unstructured":"Feistel H.: Cryptography and computer privacy. Sci. Am. 228(5), 15\u201323 (1973).","journal-title":"Sci. Am."},{"key":"1266_CR19","doi-asserted-by":"crossref","unstructured":"G\u00e9rard, B., Grosso, V., Naya-Plasencia, M., Standaert, F.: Block ciphers that are easier to mask: How far can we go? In: Cryptographic Hardware and Embedded Systems\u2013CHES 2013\u201315th International Workshop, Santa Barbara, CA, USA, August 20-23, 2013. Proceedings, Lecture Notes in Computer Science, vol. 8086, pp. 383\u2013399. Springer (2013)","DOI":"10.1007\/978-3-642-40349-1_22"},{"key":"1266_CR20","doi-asserted-by":"crossref","unstructured":"Grosso V., Leurent G., Standaert F., Varici K.: LS-designs: Bitslice encryption for efficient masked software implementations. In: Fast Software Encryption\u201321st International Workshop, FSE 2014, London, UK, March 3-5, 2014. . Revised Selected Papers, Lecture Notes in Computer Science 8540, 18\u201337 (2014) Springer.","DOI":"10.1007\/978-3-662-46706-0_2"},{"key":"1266_CR21","unstructured":"Grosso, V., Leurent, G., Standaert, F.X., Varici, K., Durvaux, F., Gaspar, L., Kerckhof, S.: SCREAM & iSCREAM side-channel resistant authenticated encryption with masking. Can. CAESAR Compet. (2014)"},{"issue":"2","key":"1266_CR22","doi-asserted-by":"publisher","first-page":"313","DOI":"10.1016\/j.dam.2005.03.022","volume":"154","author":"X Hou","year":"2006","unstructured":"Hou X.: Affinity of permutations of $${\\mathbb{F} }_{2}^{n}$$. Discret. Appl. Math. 154(2), 313\u2013325 (2006).","journal-title":"Discret. Appl. Math."},{"key":"1266_CR23","doi-asserted-by":"crossref","unstructured":"Ishai Y., Sahai A., Wagner D. A.: Private circuits: Securing hardware against probing attacks. In: Advances in Cryptology\u2013CRYPTO 2003, 23rd Annual International Cryptology Conference, Santa Barbara, California, USA, August 17-21, 2003, Proceedings. Lecture Notes in Computer Science 2729, 463\u2013481 (2003) Springer.","DOI":"10.1007\/978-3-540-45146-4_27"},{"key":"1266_CR24","doi-asserted-by":"crossref","unstructured":"Kim H., Jeon Y., Kim G., Kim J., Sim B., Han D., Seo H., Kim S., Hong S., Sung J., Hong D.: PIPO: A lightweight block cipher with efficient higher-order masking software implementations. In: Information Security and Cryptology\u2013ICISC 2020\u201323rd International Conference, Seoul, South Korea, December 2-4, 2020, Proceedings. Lecture Notes in Computer Science 12593, 99\u2013122 (2020).","DOI":"10.1007\/978-3-030-68890-5_6"},{"key":"1266_CR25","doi-asserted-by":"crossref","unstructured":"Kocher, P.C.: Timing attacks on implementations of Diffie-Hellman, RSA, DSS, and other systems. In: Advances in Cryptology\u2013CRYPTO \u201996, 16th Annual International Cryptology Conference, Santa Barbara, California, USA, August 18-22, 1996, Proceedings, Lecture Notes in Computer Science, vol. 1109, pp. 104\u2013113. Springer (1996)","DOI":"10.1007\/3-540-68697-5_9"},{"key":"1266_CR26","unstructured":"Lai, X., Massey, J.L.: A proposal for a new block encryption standard. In: Advances in Cryptology\u2013EUROCRYPT \u201990, Workshop on the Theory and Application of Cryptographic Techniques, Aarhus, Denmark, May 21-24, 1990, Proceedings, Lecture Notes in Computer Science, vol. 473, pp. 389\u2013404. Springer (1990)"},{"key":"1266_CR27","doi-asserted-by":"crossref","unstructured":"Leander G., Poschmann A.: On the classification of 4 bit S-boxes. In: Arithmetic of Finite Fields, First International Workshop, WAIFI 2007, Madrid, Spain, June 21-22, 2007, Proceedings. Lecture Notes in Computer Science 4547, 159\u2013176 (2007) Springer","DOI":"10.1007\/978-3-540-73074-3_13"},{"key":"1266_CR28","unstructured":"Li Y., Wang M.: Constructing S-boxes for lightweight cryptography with Feistel structure. In: Cryptographic Hardware and Embedded Systems\u2013CHES 2014\u201316th International Workshop, Busan, South Korea, September 23-26, 2014. Proceedings. Lecture Notes in Computer Science 8731, 127\u2013146 (2014) Springer."},{"key":"1266_CR29","doi-asserted-by":"crossref","unstructured":"Mangard, S., Pramstaller, N., Oswald, E.: Successfully attacking masked AES hardware implementations. In: Cryptographic Hardware and Embedded Systems\u2013CHES 2005, 7th International Workshop, Edinburgh, UK, August 29\u2013September 1, 2005, Proceedings, Lecture Notes in Computer Science, vol. 3659, pp. 157\u2013171. Springer (2005)","DOI":"10.1007\/11545262_12"},{"key":"1266_CR30","doi-asserted-by":"crossref","unstructured":"Matsui, M.: Linear cryptanalysis method for DES cipher. In: Advances in Cryptology\u2013EUROCRYPT \u201993, Workshop on the Theory and Application of Cryptographic Techniques, Lofthus, Norway, May 23-27, 1993, Proceedings, Lecture Notes in Computer Science, vol. 765, pp. 386\u2013397. Springer (1993)","DOI":"10.1007\/3-540-48285-7_33"},{"key":"1266_CR31","doi-asserted-by":"crossref","unstructured":"Matsui, M.: New block encryption algorithm MISTY. In: Fast Software Encryption, 4th International Workshop, FSE \u201997, Haifa, Israel, January 20-22, 1997, Proceedings, Lecture Notes in Computer Science, vol. 1267, pp. 54\u201368. Springer (1997)","DOI":"10.1007\/BFb0052334"},{"key":"1266_CR32","doi-asserted-by":"crossref","unstructured":"McKay K., Bassham L., S\u00f6nmez Turan M., Mouha N.: Report on lightweight cryptography. Tech. rep, National Institute of Standards and Technology (2016).","DOI":"10.6028\/NIST.IR.8114"},{"key":"1266_CR33","doi-asserted-by":"crossref","unstructured":"Moradi, A., Poschmann, A., Ling, S., Paar, C., Wang, H.: Pushing the limits: A very compact and a threshold implementation of AES. In: Advances in Cryptology\u2013EUROCRYPT 2011\u201330th Annual International Conference on the Theory and Applications of Cryptographic Techniques, Tallinn, Estonia, May 15-19, 2011. Proceedings, Lecture Notes in Computer Science, vol. 6632, pp. 69\u201388. Springer (2011)","DOI":"10.1007\/978-3-642-20465-4_6"},{"key":"1266_CR34","doi-asserted-by":"crossref","unstructured":"Nikova, S., Rijmen, V., Schl\u00e4ffer, M.: Using normal bases for compact hardware implementations of the AES S-Box. In: Security and Cryptography for Networks, 6th International Conference, SCN 2008, Amalfi, Italy, September 10-12, 2008. Proceedings, Lecture Notes in Computer Science, vol. 5229, pp. 236\u2013245. Springer (2008)","DOI":"10.1007\/978-3-540-85855-3_16"},{"issue":"2","key":"1266_CR35","doi-asserted-by":"publisher","first-page":"292","DOI":"10.1007\/s00145-010-9085-7","volume":"24","author":"S Nikova","year":"2011","unstructured":"Nikova S., Rijmen V., Schl\u00e4ffer M.: Secure hardware implementation of nonlinear functions in the presence of glitches. J. Cryptol. 24(2), 292\u2013321 (2011).","journal-title":"J. Cryptol."},{"key":"1266_CR36","doi-asserted-by":"crossref","unstructured":"Nyberg, K.: Differentially uniform mappings for cryptography. In: Advances in Cryptology\u2013EUROCRYPT \u201993, Workshop on the Theory and Application of Cryptographic Techniques, Lofthus, Norway, May 23-27, 1993, Proceedings, Lecture Notes in Computer Science, vol. 765, pp. 55\u201364. Springer (1993)","DOI":"10.1007\/3-540-48285-7_6"},{"key":"1266_CR37","doi-asserted-by":"crossref","unstructured":"Nyberg, K., Knudsen, L.R.: Provable security against differential cryptanalysis. In: Advances in Cryptology\u2013CRYPTO \u201992, 12th Annual International Cryptology Conference, Santa Barbara, California, USA, August 16-20, 1992, Proceedings, Lecture Notes in Computer Science, vol. 740, pp. 566\u2013574. Springer (1992)","DOI":"10.1007\/3-540-48071-4_41"},{"issue":"3","key":"1266_CR38","doi-asserted-by":"publisher","first-page":"300","DOI":"10.1016\/0097-3165(76)90024-8","volume":"20","author":"O S Rothaus","year":"1976","unstructured":"Rothaus O. S.: On Bent functions. J. Comb. Theory, Ser. A 20(3), 300\u2013305 (1976).","journal-title":"J. Comb. Theory, Ser. A"},{"issue":"4","key":"1266_CR39","doi-asserted-by":"publisher","first-page":"656","DOI":"10.1002\/j.1538-7305.1949.tb00928.x","volume":"28","author":"CE Shannon","year":"1949","unstructured":"Shannon C.E.: Communication theory of secrecy systems. Bell Syst. Tech. J. 28(4), 656\u2013715 (1949).","journal-title":"Bell Syst. Tech. J."},{"key":"1266_CR40","doi-asserted-by":"crossref","unstructured":"Stern J., Vaudenay S.: CS-Cipher. In: Fast Software Encryption, 5th International Workshop, FSE \u201998, Paris, France March 23-25, 1998, Proceedings. Lecture Notes in Computer Science 1372, 189\u2013205 (1998) Springer","DOI":"10.1007\/3-540-69710-1_13"},{"key":"1266_CR41","doi-asserted-by":"crossref","unstructured":"Stoffelen, K.: Optimizing S-box implementations for several criteria using SAT solvers. In: T.\u00a0Peyrin (ed.) Fast Software Encryption-23rd International Conference, FSE 2016, Bochum, Germany, March 20\u201323, 2016, Revised Selected Papers, Lecture Notes in Computer Science, vol. 9783, pp. 140\u2013160. Springer (2016)","DOI":"10.1007\/978-3-662-52993-5_8"}],"container-title":["Designs, Codes and Cryptography"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10623-023-01266-w.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10623-023-01266-w\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10623-023-01266-w.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,10,24]],"date-time":"2023-10-24T19:16:28Z","timestamp":1698174988000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10623-023-01266-w"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,7,22]]},"references-count":41,"journal-issue":{"issue":"11","published-print":{"date-parts":[[2023,11]]}},"alternative-id":["1266"],"URL":"https:\/\/doi.org\/10.1007\/s10623-023-01266-w","relation":{},"ISSN":["0925-1022","1573-7586"],"issn-type":[{"value":"0925-1022","type":"print"},{"value":"1573-7586","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,7,22]]},"assertion":[{"value":"23 October 2022","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"18 June 2023","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"28 June 2023","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"22 July 2023","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}