J. Boyar and I. B. Damgård, “A discrete logarithm blob for noninteractive XOR gates”, DPB, vol. 19, no. 327, Aug. 1990.