This algorithm could hardly be seen in the wild, and it's also hard to find an explanation of how it works.

There isn't much of a use for it now as those who need the performance would typically use algorithms that utilize the clmul instruction, which are an order of magnitude faster. However, it's still nice to have a performant pure C algorithm.