Mihir Bellare Alexandra Boldyreva K. Kurosawa Jessica Staddon Multirecipient Encryption Schemes: How to Save on Bandwidth and Computation Without Sacrificing Security. 3927-3943 2007 53 IEEE Transactions on Information Theory 11 http://dx.doi.org/10.1109/TIT.2007.907471 db/journals/tit/tit53.html#BellareBKS07