diff --git a/ecc/bls12-377/bls12-377.go b/ecc/bls12-377/bls12-377.go
index 4b3ea6fbc0..4b6ac8e250 100644
--- a/ecc/bls12-377/bls12-377.go
+++ b/ecc/bls12-377/bls12-377.go
@@ -68,7 +68,7 @@ var LoopCounter [64]int8
 // endomorphisms ϕ₁ and ϕ₂ for <G1Affine> and <G2Affine>. lambda is such that <r, ϕ-λ> lies above
 // <r> in the ring Z[ϕ]. More concretely it's the associated eigenvalue
 // of ϕ₁ (resp ϕ₂) restricted to <G1Affine> (resp <G2Affine>)
-// see https://www.cosic.esat.kuleuven.be/nessie/reports/phase2/GLV.pdf
+// see https://link.springer.com/content/pdf/10.1007/3-540-36492-7_3
 var thirdRootOneG1 fp.Element
 var thirdRootOneG2 fp.Element
 var lambdaGLV big.Int
diff --git a/ecc/bls12-381/bls12-381.go b/ecc/bls12-381/bls12-381.go
index aa9acbf34c..9f78455f99 100644
--- a/ecc/bls12-381/bls12-381.go
+++ b/ecc/bls12-381/bls12-381.go
@@ -68,7 +68,7 @@ var LoopCounter [64]int8
 // endomorphisms ϕ₁ and ϕ₂ for <G1Affine> and <G2Affine>. lambda is such that <r, ϕ-λ> lies above
 // <r> in the ring Z[ϕ]. More concretely it's the associated eigenvalue
 // of ϕ₁ (resp ϕ₂) restricted to <G1Affine> (resp <G2Affine>)
-// see https://www.cosic.esat.kuleuven.be/nessie/reports/phase2/GLV.pdf
+// see https://link.springer.com/content/pdf/10.1007/3-540-36492-7_3
 var thirdRootOneG1 fp.Element
 var thirdRootOneG2 fp.Element
 var lambdaGLV big.Int
diff --git a/ecc/bls24-315/bls24-315.go b/ecc/bls24-315/bls24-315.go
index 0879a69d5e..3132512f3f 100644
--- a/ecc/bls24-315/bls24-315.go
+++ b/ecc/bls24-315/bls24-315.go
@@ -69,7 +69,7 @@ var LoopCounter [33]int8
 // endomorphisms ϕ₁ and ϕ₂ for <G1Affine> and <G2Affine>. lambda is such that <r, ϕ-λ> lies above
 // <r> in the ring Z[ϕ]. More concretely it's the associated eigenvalue
 // of ϕ₁ (resp ϕ₂) restricted to <G1Affine> (resp <G2Affine>)
-// see https://www.cosic.esat.kuleuven.be/nessie/reports/phase2/GLV.pdf
+// https://link.springer.com/content/pdf/10.1007/3-540-36492-7_3
 var thirdRootOneG1 fp.Element
 var thirdRootOneG2 fp.Element
 var lambdaGLV big.Int
diff --git a/ecc/bls24-317/bls24-317.go b/ecc/bls24-317/bls24-317.go
index fcba92df1a..f622c0634b 100644
--- a/ecc/bls24-317/bls24-317.go
+++ b/ecc/bls24-317/bls24-317.go
@@ -69,7 +69,7 @@ var LoopCounter [33]int8
 // endomorphisms ϕ₁ and ϕ₂ for <G1Affine> and <G2Affine>. lambda is such that <r, ϕ-λ> lies above
 // <r> in the ring Z[ϕ]. More concretely it's the associated eigenvalue
 // of ϕ₁ (resp ϕ₂) restricted to <G1Affine> (resp <G2Affine>)
-// see https://www.cosic.esat.kuleuven.be/nessie/reports/phase2/GLV.pdf
+// see https://link.springer.com/content/pdf/10.1007/3-540-36492-7_3
 var thirdRootOneG1 fp.Element
 var thirdRootOneG2 fp.Element
 var lambdaGLV big.Int
diff --git a/ecc/bn254/bn254.go b/ecc/bn254/bn254.go
index a0fa54df7e..9ba5f80a2b 100644
--- a/ecc/bn254/bn254.go
+++ b/ecc/bn254/bn254.go
@@ -71,7 +71,7 @@ var LoopCounter [66]int8
 // endomorphisms ϕ₁ and ϕ₂ for <G1Affine> and <G2Affine>. lambda is such that <r, ϕ-λ> lies above
 // <r> in the ring Z[ϕ]. More concretely it's the associated eigenvalue
 // of ϕ₁ (resp ϕ₂) restricted to <G1Affine> (resp <G2Affine>)
-// see https://www.cosic.esat.kuleuven.be/nessie/reports/phase2/GLV.pdf
+// see https://link.springer.com/content/pdf/10.1007/3-540-36492-7_3
 var thirdRootOneG1 fp.Element
 var thirdRootOneG2 fp.Element
 var lambdaGLV big.Int
diff --git a/ecc/bw6-633/bw6-633.go b/ecc/bw6-633/bw6-633.go
index 07f25ecba9..7029bdce2c 100644
--- a/ecc/bw6-633/bw6-633.go
+++ b/ecc/bw6-633/bw6-633.go
@@ -66,7 +66,7 @@ var LoopCounter1 [159]int8
 // endomorphisms ϕ₁ and ϕ₂ for <G1Affine> and <G2Affine>. lambda is such that <r, ϕ-λ> lies above
 // <r> in the ring Z[ϕ]. More concretely it's the associated eigenvalue
 // of ϕ₁ (resp ϕ₂) restricted to <G1Affine> (resp <G2Affine>)
-// see https://www.cosic.esat.kuleuven.be/nessie/reports/phase2/GLV.pdf
+// see https://link.springer.com/content/pdf/10.1007/3-540-36492-7_3
 var thirdRootOneG1 fp.Element
 var thirdRootOneG2 fp.Element
 var lambdaGLV big.Int
diff --git a/ecc/bw6-761/bw6-761.go b/ecc/bw6-761/bw6-761.go
index 493df2f029..127b3e3587 100644
--- a/ecc/bw6-761/bw6-761.go
+++ b/ecc/bw6-761/bw6-761.go
@@ -70,7 +70,7 @@ var LoopCounter1 [190]int8
 // endomorphisms ϕ₁ and ϕ₂ for <G1Affine> and <G2Affine>. lambda is such that <r, ϕ-λ> lies above
 // <r> in the ring Z[ϕ]. More concretely it's the associated eigenvalue
 // of ϕ₁ (resp ϕ₂) restricted to <G1Affine> (resp <G2Affine>)
-// see https://www.cosic.esat.kuleuven.be/nessie/reports/phase2/GLV.pdf
+// see https://link.springer.com/content/pdf/10.1007/3-540-36492-7_3
 var thirdRootOneG1 fp.Element
 var thirdRootOneG2 fp.Element
 var lambdaGLV big.Int
diff --git a/ecc/grumpkin/grumpkin.go b/ecc/grumpkin/grumpkin.go
index 8ee5a81e88..8bfe9c784d 100644
--- a/ecc/grumpkin/grumpkin.go
+++ b/ecc/grumpkin/grumpkin.go
@@ -45,7 +45,7 @@ var g1Infinity G1Jac
 // endomorphisms ϕ₁ for <G1Affine>. lambda is such that <r, ϕ-λ> lies above
 // <r> in the ring Z[ϕ]. More concretely it's the associated eigenvalue
 // of ϕ₁ restricted to <G1Affine>.
-// see https://www.cosic.esat.kuleuven.be/nessie/reports/phase2/GLV.pdf
+// see https://link.springer.com/content/pdf/10.1007/3-540-36492-7_3
 var thirdRootOneG1 fp.Element
 var lambdaGLV big.Int