  In this paper, a method for constructing a near optimal normal basis for
algebraic extensions of a finite field is described. In each extension, except
for the squares of basis elements, the product of two distinct normal basis
elements can be expressed as a linear combination of those two basis elements,
with coefficients in a much smaller subfield.
