Lan Nguyen Reihaneh Safavi-Naini Kaoru Kurosawa Verifiable shuffles: a formal model and a Paillier-based three-round construction with provable security. 241-255 2006 5 Int. J. Inf. Sec. 4 http://dx.doi.org/10.1007/s10207-006-0004-8 db/journals/ijisec/ijisec5.html#NguyenSK06