WAHBY, R. S.; BONEH, D. Fast and simple constant-time hashing to the BLS12-381 elliptic curve. IACR Transactions on Cryptographic Hardware and Embedded Systems, v. 2019, n. 4, p. 154-179, 9 Aug. 2019.