Nath, K.; Sarkar, P. Reduction Modulo 2^{448}-2^{224}-1. mathcryptology 2021, 8-21.