source 2003 Stam "On Montgomery-like representations for elliptic curves over GF(2^k)", Section 3.2, plus a1 = 1, plus b8 = a6 compute X3 = X1^4 + a6 Z1^4 compute Z3 = (X1 Z1)^2