Hardware masked AES designs usually rely on Boolean masking and perform the computation of the S-box using the tower-field decomposition. On the other hand. splitting sensitive variables in a multiplicative way is more amenable for the computation of the AES S-box. as noted by Akkar and Giraud. https://www.roneverhart.com/Field-Slacks-Mens-p10549/