Jens Groth Yuval Ishai Sub-linear Zero-Knowledge Argument for Correctness of a Shuffle. 379-396 2008 EUROCRYPT http://dx.doi.org/10.1007/978-3-540-78967-3_22 conf/eurocrypt/2008 db/conf/eurocrypt/eurocrypt2008.html#GrothI08