“Faster Complete Addition Laws for Montgomery Curves” (2024) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2024(4), pp. 737–762. doi:10.46586/tches.v2024.i4.737-762.