Hardware masked AES designs usually rely on Boolean masking and perform the computation of the S-box using the tower-field decomposition. On the other hand. splitting sensitive variables in a multiplicative way is more amenable for the computation of the AES S-box. as noted by Akkar and Giraud. https://www.roamingfreesims.com/product-category/discharge-lamps/