J. Taverne, A. Faz-Hernandez, D. F. Aranha, F. Rodríguez-Henríquez, D. Hankerson, and J. López. Speeding scalar multiplication over binary elliptic curves using the new carry-less multiplication instruction. Journal of Cryptographic Engineering, volume 1, issue 3, pages 187-199, September 2011.