J. Camenisch og I. B. Damgård, “Verifiable Encryption and Applications to Group Signatures and Signature Sharing”, BRICS, bd. 5, nr. 32, jun. 1998.