I. B. Damgård and R. Cramer, “Linear Zero-Knowledgde. A Note on Efficient Zero-Knowledge Proofs and Arguments”, BRICS, vol. 3, no. 7, Jan. 1996.