J. Groth, “Extracting Witnesses from Proofs of Knowledge in the Random Oracle Model”, BRICS, bd. 8, nr. 52, dec. 2001.