David Cash Eike Kiltz Victor Shoup The Twin Diffie-Hellman Problem and Applications. 127-145 2008 EUROCRYPT http://dx.doi.org/10.1007/978-3-540-78967-3_8 conf/eurocrypt/2008 db/conf/eurocrypt/eurocrypt2008.html#CashKS08