“Fast and simple constant-time hashing to the BLS12-381 elliptic curve” (2019) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2019(4), pp. 154–179. doi:10.13154/tches.v2019.i4.154-179.