“Software Toolkit for HFE-based Multivariate Schemes” (2019) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2019(3), pp. 257–304. doi:10.13154/tches.v2019.i3.257-304.