Fast and Simple Constant-Time Hashing to the BLS12-381 Elliptic Curve. TCHES 2019, 2019 (4), 154-179. https://doi.org/10.13154/tches.v2019.i4.154-179.