1. Wieb Bosma, James Hutton, and Eric R. Verheul, Looking beyond XTR, Advances in Cryptology—Asiacrypt 2002, Lecture Notes in Comput. Sci., vol. 2501, Springer, Berlin, 2002, pp. 46–63.[MR]
  2. Eric R. Verheul, Evidence that XTR is more secure than supersingular elliptic curve cryptosystems, J. Cryptology 17 (2004), no. 4, 277–296.[MR]