1. 2016-09-29 [8] [curves] Curves for pairings moderncrypto Ray Dillinger 2. 2016-09-01 [2] [curves] DLP to Linear Multivariable Chinese Remainder? moderncrypto Andrew Poelstra