add masked AES