J. Groth, “Extracting Witnesses from Proofs of Knowledge in the Random Oracle Model”, BRICS, vol. 8, no. 52, Dec. 2001.