Safe curves for elliptic-curve cryptography [pdf]