Evidence that XTR Is More Secure than Supersingular Elliptic Curve Cryptosystems