Verheul, 2001. Evidence that XTR Is More Secure than Supersingular Elliptic Curve Cryptosystems, in: . Springer Berlin Heidelberg.. https://doi.org/10.1007/3-540-44987-6_13