Peter Montgomery. “Modular Multiplication Without Trial Division”, Mathematics of Computation, vol. 44 no. 170, pp. 519–521, April 1985 RFC 8032 “Edwards-Curve Digital Signature Algorithm (EdDSA)”.