11/12/23 04:14:44.21
Our experiments indicate that to ensure a constant depth in the nonlinear Sbox circuits may result in as much as 100% overhead.
Increasing by a factor of two the existing 250%-700% overhead of the balanced designs (compared to standard unsecured static CMOS implementations) makes the approaches less appealing.
よろしくお願いします!