18 Seconds to Key Exchange: Limitations of Supersingular Isogeny Diffie-Hellman on Embedded Devices. - Philipp Koppermann; Eduard Pop; Johann Heyszl; Georg Sigl (IACR Cryptol. ePrint Arch., 2018)