T. Oliveira, J. López, H. Hisil, A. Faz-Hernandez, and F. Rodríguez-Henríquez. How to (pre-)compute a ladder. Selected Areas in Cryptography – SAC 2017, Springer, volume 10719, pages 172-191, December 2017.