[1] http://eprint.iacr.org/2004/199
[2] http://www.iacr.org/cryptodb/archive/2005/EUROCRYPT/2868/286...
[3] http://link.springer.com/chapter/10.1007%2F11535218_2