Verheul, 2004. Evidence that XTR Is More Secure than Supersingular Elliptic Curve Cryptosystems 17.. https://doi.org/10.1007/s00145-004-0313-x