Jens Groth Steve Lu A Non-interactive Shuffle with Pairing Based Verifiability. 51-67 2007 ASIACRYPT http://dx.doi.org/10.1007/978-3-540-76900-2_4 db/conf/asiacrypt/asiacrypt2007.html#GrothL07