Also known as anomalous binary curves. Compared to random binary curves, significantly faster point multiplication methods are available.
Curves defined over .
Permit faster point multiplication by replacing double-and-add with field-squaring operations.