I. B. Damgård and M. J. Jurik, “Efficient Protocols based on Probabilistic Encryption using Composite Degree Residue Classes”, BRICS, vol. 7, no. 5, Jan. 2000.