Nath, K., and P. Sarkar. “Reduction Modulo 2^{448}-2^{224}-1”. Mathematical Cryptology, no. 1, Jan. 2021, pp. 8-21, https://journals.flvc.org/mathcryptology/article/view/123700.