Nath, Kaushik, and Palash Sarkar. “Reduction Modulo 2^{448}-2^{224}-1”. Mathematical Cryptology, no. 1 (January 5, 2021): 8–21. Accessed March 28, 2024. https://journals.flvc.org/mathcryptology/article/view/123700.