“Concrete quantum cryptanalysis of binary elliptic curves” (2020) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2021(1), pp. 451–472. doi:10.46586/tches.v2021.i1.451-472.