The complete cost of cofactor h=1

Peter Schwabe, Daan Sprenkels. The complete cost of cofactor h=1. IACR Cryptology ePrint Archive, 2019:1166, 2019. [doi]

Abstract

Abstract is missing.