Johannes Merkle Ralph Werchner On the Security of Server-Aided RSA Protocols. 99-116 http://link.springer.de/link/service/series/0558/bibs/1431/14310099.htm 1998 conf/pkc/1998 Public Key Cryptography db/conf/pkc/pkc98.html#MerkleW98