Victor S. Miller The Weil Pairing, and Its Efficient Calculation. 235-261 2004 17 J. Cryptology 4 http://dx.doi.org/10.1007/s00145-004-0315-8 db/journals/joc/joc17.html#Miller04