Evidence that XTR Is More Secure than Supersingular Elliptic Curve Cryptosystems Eric R. Verheul 2001 Lecture notes in computer science 151 citations