Akinori Kawachi Keisuke Tanaka Keita Xagawa Concurrently Secure Identification Schemes Based on the Worst-Case Hardness of Lattice Problems. 372-389 2008 ASIACRYPT http://dx.doi.org/10.1007/978-3-540-89255-7_23 conf/asiacrypt/2008 db/conf/asiacrypt/asiacrypt2008.html#KawachiTX08