I. B. Damgård og M. J. Jurik, “Efficient Protocols based on Probabilistic Encryption using Composite Degree Residue Classes”, BRICS, bd. 7, nr. 5, jan. 2000.