Nath, K., & Sarkar, P. (2021). Reduction Modulo 2^{448}-2^{224}-1. Mathematical Cryptology, (1), 8–21. Retrieved from https://journals.flvc.org/mathcryptology/article/view/123700