T. Oliveira, J. López, D. F. Aranha, and F. Rodríguez-Henríquez. Two is the fastest prime: lambda coordinates for binary elliptic curves. J. Cryptographic Engineering, volume 4, issue 1, 2014.