Alphabetical order:

• Daniel J. Bernstein, University of Illinois at Chicago
• Tanja Lange, Technische Universiteit Eindhoven
• Chloe Martindale, Technische Universiteit Eindhoven
• Lorenz Panny, Technische Universiteit Eindhoven

This work was supported in part by the Commission of the European Communities through the Horizon 2020 program under project number 643161 (ECRYPT-NET), 645622 (PQCRYPTO), 645421 (ECRYPT-CSA), and CHIST-ERA USEIT (NWO project 651.002.004); the Netherlands Organisation for Scientific Research (NWO) under grants 628.001.028 (FASOR) and 639.073.005; and the U.S. National Science Foundation under grant 1314919.

"Any opinions, findings, and conclusions or recommendations expressed in this material are those of the author(s) and do not necessarily reflect the views of the National Science Foundation" (or other funding agencies).