Eric R. Verheul. Evidence that XTR Is More Secure than Supersingular Elliptic Curve Cryptosystems. In Birgit Pfitzmann, editor, Advances in Cryptology - EUROCRYPT 2001, International Conference on the Theory and Application of Cryptographic Techniques, Innsbruck, Austria, May 6-10, 2001, Proceeding. Volume 2045 of Lecture Notes in Computer Science, pages 195-210, Springer, 2001. [doi]