q=512 (poly 0b1000010001), r=sqrt(2q)=32; element orders of 60 random elements: {37: 1, 73: 4, 109: 1, 481: 14, 511: 24, 545: 16} (all divide 4, q-1, q+r+1 or q-r+1)
