Exploiting Small Leakages in Masks to Turn a Second-Order Attack into a First-Order Attack and Improved Rotating Substitution Box Masking with Linear Code Cosets

Table 1

Horizontally and vertically balanced code with length 8 and 16 codewords.

	Components								Sum of bits
	8	7	6	5	4	3	2	1
Codewords	0	0	0	0	1	1	1	1	4
	1	1	1	1	0	0	0	0	4
	0	0	1	1	0	0	1	1	4
	1	1	0	0	1	1	0	0	4
	0	1	0	1	0	1	0	1	4
	1	0	1	0	1	0	1	0	4
	0	1	1	0	0	1	1	0	4
	1	0	0	1	1	0	0	1	4
	1	1	1	0	0	0	0	1	4
	0	0	0	1	1	1	1	0	4
	1	1	0	1	0	0	1	0	4
	0	0	1	0	1	1	0	1	4
	1	0	1	1	0	1	0	0	4
	0	1	0	0	1	0	1	1	4
	0	1	1	1	1	0	0	0	4
	1	0	0	0	0	1	1	1	4
Sum of bits	8	8	8	8	8	8	8	8