https://www.iacr.org/archive/asiacrypt2010/6477178/6477178.pdf