Practical Invalid Curve Attacks
web-in-security.blogspot.com