Schoof–Elkies–Atkin algorithm