Differential addition on binary elliptic curves