Nath, Kaushik, and Palash Sarkar. “Reduction Modulo 2^{448}-2^{224}-1”. Mathematical Cryptology, no. 1, Jan. 2021, pp. 8-21, https://ojs.test.flvc.org/mathcryptology/article/view/123700.