Nath, Kaushik, and Palash Sarkar. 2021. “Reduction Modulo 2^{448}-2^{224}-1”. Mathematical Cryptology, no. 1 (January):8-21. https://journals.flvc.org/mathcryptology/article/view/123700.