Hardware masked AES designs usually rely on Boolean masking and perform the computation of the S-box using the tower-field decomposition. On the other hand. splitting sensitive variables in a multiplicative way is more amenable for the computation of the AES S-box. as noted by Akkar and Giraud. https://www.spidertattooz.com/Patchwork-Barn-Quilt-Pattern-by-Edyta-Sitar/