R. Cramer and I. B. Damgård, “Zero-Knowledge Proofs for Finite Field Arithmetic or: Can Zero-Knowledge be for Free?”, BRICS, vol. 4, no. 27, Jan. 1997.