1. Wieb Bosma, James Hutton, and Eric R. Verheul, Looking beyond XTR, Advances in Cryptology—Asiacrypt 2002, Lecture Notes in Comput. Sci., vol. 2501, Springer, Berlin, 2002, pp. 46–63.[MR]