Steven D. Galbraith Florian Hess Frederik Vercauteren Aspects of Pairing Inversion. 5719-5728 2008 54 IEEE Transactions on Information Theory 12 http://dx.doi.org/10.1109/TIT.2008.2006431 db/journals/tit/tit54.html#GalbraithHV08