J. Camenisch and M. Michels, “Proving in Zero-Knowledge that a Number is the Product of Two Safe Primes”, BRICS, vol. 5, no. 29, Jan. 1998.