Transitional Leakage in Theory and Practice - Unveiling Security Flaws in Masked Circuits