References.bib

@inproceedings{Gepetto,
  author    = {C. Costello and
               C. Fournet and
               J. Howell and
               M. Kohlweiss and
               B. Kreuter and
               M. Naehrig and
               B. Parno and
               S. Zahur},
  title     = {Geppetto: Versatile Verifiable Computation},
  booktitle = {2015 {IEEE} Symposium on Security and Privacy, {SP} 2015, San Jose,
               CA, USA, May 17-21, 2015},
  pages     = {253--270},
  year      = {2015},
}
@inproceedings{BCTV,
  author    = {E. Ben{-}Sasson and
               A. Chiesa and
               E. Tromer and
               M. Virza},
  title     = {Succinct Non-Interactive Zero Knowledge for a von Neumann Architecture},
  booktitle = {Proceedings of the 23rd {USENIX} Security Symposium, San Diego, CA,
               USA, August 20-22, 2014.},
  pages     = {781--796},
  year      = {2014},
}

@book{golub2013matrix,
  title={Matrix computations},
  author={Golub, Gene H and Van Loan, Charles F},
  year={2013},
  publisher={JHU press}
}

@inproceedings{Naor03,
  author    = {M. Naor},
  title     = {On Cryptographic Assumptions and Challenges},
  booktitle = {Advances in Cryptology - {CRYPTO} 2003, 23rd Annual International
               Cryptology Conference, Santa Barbara, California, USA, August 17-21,
               2003, Proceedings},
  pages     = {96--109},
  year      = {2003}}
  
  @inproceedings{GW11,
  author    = {C. Gentry and
               D. Wichs},
  title     = {Separating succinct non-interactive arguments from all falsifiable
               assumptions},
  booktitle = {Proceedings of the 43rd {ACM} Symposium on Theory of Computing, {STOC}
               2011, San Jose, CA, USA, 6-8 June 2011},
  pages     = {99--108},
  year      = {2011}}
  
  
@inproceedings{GGPR,
  author    = {R. Gennaro and
               C. Gentry and
               B. Parno and
               M. Raykova},
  title     = {Quadratic Span Programs and Succinct NIZKs without PCPs},
  booktitle = {Advances in Cryptology - {EUROCRYPT} 2013, 32nd Annual International
               Conference on the Theory and Applications of Cryptographic Techniques,
               Athens, Greece, May 26-30, 2013. Proceedings},
  pages     = {626--645},
  year      = {2013},}
@article{PHGR,
  author    = {B. Parno and
               J. Howell and
               C. Gentry and
               M. Raykova},
  title     = {Pinocchio: nearly practical verifiable computation},
  journal   = {Commun. {ACM}},
  volume    = {59},
  number    = {2},
  pages     = {103--112},
  year      = {2016},
  url       = {http://doi.acm.org/10.1145/2856449},
  doi       = {10.1145/2856449},
  timestamp = {Thu, 25 Feb 2016 18:39:51 +0100},
  biburl    = {http://dblp.uni-trier.de/rec/bib/journals/cacm/ParnoHG016},
  bibsource = {dblp computer science bibliography, http://dblp.org}
}
@inproceedings{Schnorr,
  author    = {C. Schnorr},
  title     = {Efficient Identification and Signatures for Smart Cards},
  booktitle = {Advances in Cryptology - {CRYPTO} '89, 9th Annual International Cryptology
               Conference, Santa Barbara, California, USA, August 20-24, 1989, Proceedings},
  pages     = {239--252},
  year      = {1989},
  }
  
  @inproceedings{BCGTV15,
  author    = {E. Ben{-}Sasson and
               A. Chiesa and
               M. Green and
               E. Tromer and
               M. Virza},
  title     = {Secure Sampling of Public Parameters for Succinct Zero Knowledge Proofs},
  booktitle = {2015 {IEEE} Symposium on Security and Privacy, {SP} 2015, San Jose,
               CA, USA, May 17-21, 2015},
  pages     = {287--304},
  year      = {2015},}
  @inproceedings{BCPR14,
  author    = {N. Bitansky and
               R. Canetti and
               O. Paneth and
               A. Rosen},
  title     = {On the existence of extractable one-way functions},
  booktitle = {Symposium on Theory of Computing, {STOC} 2014, New York, NY, USA,
               May 31 - June 03, 2014},
  pages     = {505--514},
  year      = {2014},}
 @article{CGGN,
  author    = {M. Campanelli and R. Gennaro and S. Goldfeder and L. Nizzardo},
  title     = {Zero-Knowledge Contingent Payments Revisited: Attacks and Payments for Services},
  journal   = {Commun. {ACM}},
  year      = {2017},
} 


@misc{BFS16,
  author       = {M. Bellare and
               G. Fuchsbauer and
               A. Scafuro},
  title        = {NIZKs with an Untrusted {CRS:} Security in the Face of Parameter Subversion},
  howpublished = {Cryptology ePrint Archive, Paper 2016/372},
  year         = {2016},
  note         = {\url{https://eprint.iacr.org/2016/372}},
}
@article{F17,
  author    = {G. Fuchsbauer},
  title     = {Subversion zero-knowledge SNARKs},
  year      = {2017},
}


@article{ABLZ17,
  author    = {B. Abdolmaleki and K. Baghery and H. Lipmaa and M. Zając},
  title     = {A Subversion-Resistant SNARK},
  year      = {2017},
}
@misc{zcash,
  author = {Zcash},
  title = {https://www.z.cash},
 }
@misc{zcashceremony,
  author = {Z. Wilcox},
  title = {https://z.cash/blog/the-design-of-the-ceremony.html},
 }
@misc{libsnark,
  title = {https://github.com/scipr-lab/libsnark},
 }
@misc{snarkjs,
  title = {https://github.com/iden3/snarkjs}
}
 
 @inproceedings{Groth16,
  author    = {J. Groth},
  title     = {On the Size of Pairing-Based Non-interactive Arguments},
  booktitle = {Advances in Cryptology - {EUROCRYPT} 2016 - 35th Annual International
               Conference on the Theory and Applications of Cryptographic Techniques,
               Vienna, Austria, May 8-12, 2016, Proceedings, Part {II}},
  pages     = {305--326},
  year      = {2016},
}
@misc{FirstMPC,
  author       = {S. Bowe and
               A. Gabizon and
               M. D. Green},
  title        = {A multi-party protocol for constructing the public parameters of the
               Pinocchio zk-SNARK},
  howpublished = {Cryptology ePrint Archive, Paper 2017/602},
  year         = {2017},
  note         = {\url{https://eprint.iacr.org/2017/602}},
}@misc{SecondMPC,
  author       = {S. Bowe and A. Gabizon and I. Miers},
  title        = {Scalable Multi-party Computation for zk-SNARK Parameters in the Random Beacon Model},
  howpublished = {Cryptology ePrint Archive, Paper 2017/1050},
  year         = {2017},
  note         = {\url{https://eprint.iacr.org/2017/1050}},
}


@inproceedings{GM17,
  author    = {J. Groth and
               M. Maller},
  title     = {Snarky Signatures: Minimal Signatures of Knowledge from Simulation-Extractable
               SNARKs},
  booktitle = {Advances in Cryptology - {CRYPTO} 2017 - 37th Annual International
               Cryptology Conference, Santa Barbara, CA, USA, August 20-24, 2017,
               Proceedings, Part {II}},
  pages     = {581--612},
  year      = {2017},
  }
  
  
  
  @inproceedings{DFGK14,
  author    = {G. Danezis and
               C. Fournet and
               J. Groth and
               M. Kohlweiss},
  title     = {Square Span Programs with Applications to Succinct {NIZK} Arguments},
  booktitle = {Advances in Cryptology - {ASIACRYPT} 2014 - 20th International Conference
               on the Theory and Application of Cryptology and Information Security,
               Kaoshiung, Taiwan, R.O.C., December 7-11, 2014. Proceedings, Part
               {I}},
  pages     = {532--550},
  year      = {2014},}
  
 @misc{libsnarkStats,
    note = {\url{https://github.com/scipr-lab/libsnark/tree/master/libsnark/zk_proof_systems/ppzksnark}},
}



@misc{BGG,
  author       = {S. Bowe and
               A. Gabizon and
               M. D. Green},
  title        = {A multi-party protocol for constructing the public parameters of the
               Pinocchio zk-SNARK},
  howpublished = {Cryptology ePrint Archive, Paper 2017/602},
  year         = {2017},
  note         = {\url{https://eprint.iacr.org/2017/602}},
 }
 
 
 @misc{Parno15,
  author       = {B. Parno},
  title        = {A Note on the Unsoundness of vnTinyRAM's {SNARK}},
  howpublished = {Cryptology ePrint Archive, Paper 2015/437},
  year         = {2015},
  note         = {\url{https://eprint.iacr.org/2015/437}},
 }
 
 
 
 @inproceedings{Adsnark ,
  author    = {M. Backes and
               M. Barbosa and
               D. Fiore and
               R. M. Reischuk},
  title     = {{ADSNARK:} Nearly Practical and Privacy-Preserving Proofs on Authenticated
               Data},
  booktitle = {2015 {IEEE} Symposium on Security and Privacy, {SP} 2015, San Jose,
               CA, USA, May 17-21, 2015},
  pages     = {271--286},
  year      = {2015},
  crossref  = {DBLP:conf/sp/2015},
  url       = {https://doi.org/10.1109/SP.2015.24},
  doi       = {10.1109/SP.2015.24},
  timestamp = {Thu, 15 Jun 2017 21:41:04 +0200},
  biburl    = {https://dblp.org/rec/bib/conf/sp/0001BFR15},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}



@inproceedings{Fuchsbauer18,
  author    = {G. Fuchsbauer},
  title     = {Subversion-Zero-Knowledge SNARKs},
  booktitle = {Public-Key Cryptography - {PKC} 2018 - 21st {IACR} International Conference
               on Practice and Theory of Public-Key Cryptography, Rio de Janeiro,
               Brazil, March 25-29, 2018, Proceedings, Part {I}},
  pages     = {315--347},
  year      = {2018},
  crossref  = {DBLP:conf/pkc/2018-1},
  url       = {https://doi.org/10.1007/978-3-319-76578-5\_11},
  doi       = {10.1007/978-3-319-76578-5\_11},
  timestamp = {Fri, 02 Nov 2018 09:42:29 +0100},
  biburl    = {https://dblp.org/rec/bib/conf/pkc/Fuchsbauer18},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}



@misc{BG18,
  author       = {S. Bowe and
               A. Gabizon},
  title        = {Making {Groth}'s zk-{SNARK} Simulation Extractable in the Random Oracle
               Model},
  howpublished = {Cryptology ePrint Archive, Paper 2018/187},
  year         = {2018},
  note         = {\url{https://eprint.iacr.org/2018/187}},}

  
  
  @misc{BCPR13,
  author       = {N. Bitansky and
               R. Canetti and
               O. Paneth and
               A. Rosen},
  title        = {Indistinguishability Obfuscation vs. Auxiliary-Input Extractable Functions:
               One Must Fall},
  howpublished = {Cryptology ePrint Archive, Paper 2013/641},
  year         = {2013},
  note         = {\url{https://eprint.iacr.org/2013/641}},}
  
  
  @inproceedings{Groth10,
  author    = {J. Groth},
  title     = {Short Pairing-Based Non-interactive Zero-Knowledge Arguments},
  booktitle = {Advances in Cryptology - {ASIACRYPT} 2010 - 16th International Conference
               on the Theory and Application of Cryptology and Information Security,
               Singapore, December 5-9, 2010. Proceedings},
  pages     = {321--340},
  year      = {2010},
}

@inproceedings{aurora,
  author    = {E. Ben{-}Sasson and
               A. Chiesa and
               M. Riabzev and
               N. Spooner and
               M. Virza and
               N. P. Ward},
  title     = {Aurora: Transparent Succinct Arguments for {R1CS}},
  booktitle = {Advances in Cryptology - {EUROCRYPT} 2019 - 38th Annual International
               Conference on the Theory and Applications of Cryptographic Techniques,
               Darmstadt, Germany, May 19-23, 2019, Proceedings, Part {I}},
  pages     = {103--128},
  year      = {2019},
 }
 @misc{sonic,
  author       = {M. Maller and
               S. Bowe and
               M. Kohlweiss and
               S. Meiklejohn},
  title        = {Sonic: Zero-Knowledge SNARKs from Linear-Size Universal and Updateable
               Structured Reference Strings},
  howpublished = {Cryptology ePrint Archive, Paper 2019/099},
  year         = {2019},
  note         = {\url{https://eprint.iacr.org/2019/099}},}
  
  @inproceedings{BCGRS,
  author    = {E. Ben{-}Sasson and
               A. Chiesa and
               A. Gabizon and
               M. Riabzev and
               N. Spooner},
  title     = {Interactive Oracle Proofs with Constant Rate and Query Complexity},
  booktitle = {44th International Colloquium on Automata, Languages, and Programming,
               {ICALP} 2017, July 10-14, 2017, Warsaw, Poland},
  pages     = {40:1--40:15},
  year      = {2017},
  }
  @article{BFL,
  author    = {L. Babai and
               L. Fortnow and
               C. Lund},
  title     = {Non-Deterministic Exponential Time has Two-Prover Interactive Protocols},
  journal   = {Computational Complexity},
  volume    = {1},
  pages     = {3--40},
  year      = {1991},}
  
  @article{BSS,
  author    = {E. Ben{-}Sasson and
               M. Sudan},
  title     = {Short PCPs with Polylog Query Complexity},
  journal   = {{SIAM} J. Comput.},
  volume    = {38},
  number    = {2},
  pages     = {551--607},
  year      = {2008},
  }
  
  
@inproceedings{BCGV,
  author    = {E. Ben{-}Sasson and
               A. Chiesa and
               A. Gabizon and
               M. Virza},
  title     = {Quasi-Linear Size Zero Knowledge from Linear-Algebraic PCPs},
  booktitle = {Theory of Cryptography - 13th International Conference, {TCC} 2016-A,
               Tel Aviv, Israel, January 10-13, 2016, Proceedings, Part {II}},
  pages     = {33--64},
  year      = {2016},}
@misc{firstUniversal,
  author       = {J. Groth and
               M. Kohlweiss and
               M. Maller and
               S. Meiklejohn and
               I. Miers},
  title        = {Updatable and Universal Common Reference Strings with Applications
               to zk-SNARKs},
  howpublished = {Cryptology ePrint Archive, Paper 2018/280},
  year         = {2018},
  note         = {\url{https://eprint.iacr.org/2018/280}},}

  @inproceedings{AGM,
  author    = {G. Fuchsbauer and
               E. Kiltz and
               J. Loss},
  title     = {The Algebraic Group Model and its Applications},
  booktitle = {Advances in Cryptology - {CRYPTO} 2018 - 38th Annual International
               Cryptology Conference, Santa Barbara, CA, USA, August 19-23, 2018,
               Proceedings, Part {II}},
  pages     = {33--62},
  year      = {2018},}
  

  @inproceedings{permorig,
  author    = {S. Bayer and
               J. Groth},
  title     = {Efficient Zero-Knowledge Argument for Correctness of a Shuffle},
  booktitle = {Advances in Cryptology - {EUROCRYPT} 2012 - 31st Annual International
               Conference on the Theory and Applications of Cryptographic Techniques,
               Cambridge, UK, April 15-19, 2012. Proceedings},
  pages     = {263--280},
  year      = {2012}}
  
  
@inproceedings{Kilian,
  author    = {J. Kilian},
  title     = {A Note on Efficient Zero-Knowledge Proofs and Arguments (Extended
               Abstract)},
  booktitle = {Proceedings of the 24th Annual {ACM} Symposium on Theory of Computing,
               May 4-6, 1992, Victoria, British Columbia, Canada},
  pages     = {723--732},
  year      = {1992},}
  
  
  @inproceedings{CCSD10,
  title={Fixed argument pairings},
  author={C. Costello and D. Stebila},
  booktitle={International Conference on Cryptology and Information Security in Latin America},
  pages={92--108},
  year={2010},
  organization={Springer}}
  
  
  @inproceedings{BCCT,
  author    = {N. Bitansky and
               R. Canetti and
               A. Chiesa and
               E. Tromer},
  title     = {From extractable collision resistance to succinct non-interactive
               arguments of knowledge, and back again},
  booktitle = {Innovations in Theoretical Computer Science 2012, Cambridge, MA, USA,
               January 8-10, 2012},
  pages     = {326--349},
  year      = {2012},}
  
  
  
  
  @article{Micali,
  author    = {S. Micali},
  title     = {Computationally Sound Proofs},
  journal   = {{SIAM} J. Comput.},
  volume    = {30},
  number    = {4},
  pages     = {1253--1298},
  year      = {2000},}
a service of Schloss Dagstuhl - Leibniz Center for Informatics	home


@misc{auroralight,
  author       = {A. Gabizon},
  title        = {AuroraLight:Improved prover efficiency and {SRS} size in a Sonic-like system},
  howpublished = {Cryptology ePrint Archive, Paper 2019/601},
  year         = {2019},
  note         = {\url{https://eprint.iacr.org/2019/601}},
  }
  
  
  
  @misc{marlin,
  author       = {A. Chiesa and
               Y. Hu and
               M. Maller and
               P. Mishra and
               N. Vesely and
               N. P. Ward},
  title        = {Marlin: Preprocessing zkSNARKs with Universal and Updatable {SRS}},
  howpublished = {Cryptology ePrint Archive, Paper 2019/1047},
  year         = {2019},
  note         = {\url{https://eprint.iacr.org/2019/1047}},
}


@misc{fractal,
  author       = {A. Chiesa and
               D. Ojha and
               N. Spooner},
  title        = {Fractal: Post-Quantum and Transparent Recursive Proofs from Holography},
  howpublished = {Cryptology ePrint Archive, Paper 2019/1076},
  year         = {2019},
  note         = {\url{https://eprint.iacr.org/2019/1076}},
}



  @article{bootle,
  author    = {J. Bootle and
               A. Cerulli and
               P. Chaidos and
               J. Groth and
               C. Petit},
  title     = {Efficient Zero-Knowledge Arguments for Arithmetic Circuits in the
               Discrete Log Setting},
  booktitle = {Advances in Cryptology - {EUROCRYPT} 2016 - 35th Annual International
               Conference on the Theory and Applications of Cryptographic Techniques,
               Vienna, Austria, May 8-12, 2016, Proceedings, Part {II}},
  pages     = {327--357},
  year      = {2016},
 }
 @article{kate,
  author    = {A. Kate and
               G. M. Zaverucha and
               I. Goldberg},
  title     = {Constant-Size Commitments to Polynomials and Their Applications},
  booktitle = {Advances in Cryptology - {ASIACRYPT} 2010 - 16th International Conference
               on the Theory and Application of Cryptology and Information Security,
               Singapore, December 5-9, 2010. Proceedings},
  pages     = {177--194},
  year      = {2010},
}
 @misc{hinf,
  author       = {D. Boneh and
               J. Drake and
               B. Fisch and
               A. Gabizon},
  title        = {Halo Infinite: Recursive zk-SNARKs from any Additive Polynomial Commitment
               Scheme},
  howpublished = {Cryptology ePrint Archive, Paper 2020/1536},
  year         = {2020},
  note         = {\url{https://eprint.iacr.org/2020/1536}},
}
@article{polyinterpolate,
author ={J. von zur Gathen and J. Gerhard},
title= {Fast polynomial evaluation and interpolation.},
journal = {Modern Computer Algebra, chapter 10},
pages={ 295--310},
}
@inproceedings{Tomescu,
  author    = {A. Tomescu and
               I. Abraham and
               V. Buterin and
               J. Drake and
               D. Feist and
               D. Khovratovich},
  editor    = {Clemente Galdi and
               Vladimir Kolesnikov},
  title     = {Aggregatable Subvector Commitments for Stateless Cryptocurrencies},
  booktitle = {Security and Cryptography for Networks - 12th International Conference,
               {SCN} 2020, Amalfi, Italy, September 14-16, 2020, Proceedings},
  series    = {Lecture Notes in Computer Science},
  volume    = {12238},
  pages     = {45--64},
  publisher = {Springer},
  year      = {2020},
}
@misc{caulk,
  author       = {A. Zapico and
               V. Buterin and
               D. Khovratovich and
               M. Maller and
               A. Nitulescu and
               M. Simkin},
  title        = {Caulk: Lookup Arguments in Sublinear Time},
  howpublished = {Cryptology ePrint Archive, Paper 2022/621},
  year         = {2022},
  note         = {\url{https://eprint.iacr.org/2022/621}},
}
@misc{caulkp,
  author       = {J. Posen and A. A. Kattis},
  title        = {Caulk+: Table-independent lookup arguments},
  howpublished = {Cryptology ePrint Archive, Paper 2022/957},
  year         = {2022},
  note         = {\url{https://eprint.iacr.org/2022/957}},
}
@misc{plonk,
  author       = {A. Gabizon and
               Z. J. Williamson and
               O. Ciobotaru},
  title        = {{PLONK:} Permutations over Lagrange-bases for Oecumenical Noninteractive
               arguments of Knowledge},
  howpublished = {Cryptology ePrint Archive, Paper 2019/953},
  year         = {2019},
  note         = {\url{https://eprint.iacr.org/2019/953}},
  }
  
  @article{drakevideo,
  author = {J. Drake},
  title= { https://youtu.be/TbNauD5wgXM?t=2251},
  }
  
  @misc{plookup,
  author       = {A. Gabizon and
               Z. J. Williamson},
  title        = {plookup: {A} simplified polynomial protocol for lookup tables},
  howpublished = {Cryptology ePrint Archive, Paper 2020/315},
  year         = {2020},
  note         = {\url{https://eprint.iacr.org/2020/315}},
}

@inproceedings{arya,
  author    = {J. Bootle and
               A. Cerulli and
               J. Groth and
               S. K. Jakobsen and
               M. Maller},
  editor    = {Thomas Peyrin and
               Steven D. Galbraith},
  title     = {Arya: Nearly Linear-Time Zero-Knowledge Proofs for Correct Program
               Execution},
  booktitle = {Advances in Cryptology - {ASIACRYPT} 2018 - 24th International Conference
               on the Theory and Application of Cryptology and Information Security,
               Brisbane, QLD, Australia, December 2-6, 2018, Proceedings, Part {I}},
  series    = {Lecture Notes in Computer Science},
  volume    = {11272},
  pages     = {595--626},
  publisher = {Springer},
  year      = {2018},
  }
  @article{fastkzgproofs,
  author = {A. Tomescu},
  title= {Feist-Khovratovich technique for computing KZG proofs fast},
  url= {  https://alinush.github.io/2021/06/17/Feist-Khovratovich-technique-for-computing-KZG-proofs-fast.html},
  }
  @article{fastkzgproofsorig,
  author = {D. Feist and D. Khovratovich},
  title= {Fast amortized Kate proofs},
  url= {https://github.com/khovratovich/Kate/blob/master/Kate_amortized.pdf},
  }
@misc{flookup,
  author       = {A. Gabizon and
               D. Khovratovich},
  title        = {flookup: Fractional decomposition-based lookups in quasi-linear time
               independent of table size},
  howpublished = {Cryptology ePrint Archive, Paper 2022/1447},
  year         = {2022},
  note         = {\url{https://eprint.iacr.org/2022/1447}},
  }
  
  @misc{baloo,
  author       = {A. Zapico and
               A. Gabizon and
               D. Khovratovich and
               M. Maller and
               C. R{\`{a}}fols},
  title        = {Baloo: Nearly Optimal Lookup Arguments},
  howpublished = {Cryptology ePrint Archive, Paper 2022/1565},
  year         = {2022},
  note         = {\url{https://eprint.iacr.org/2022/1565}},
}
@misc{mvlookup,
  author       = {U. Hab{\"{o}}ck},
  title        = {Multivariate lookups based on logarithmic derivatives},
  howpublished = {Cryptology ePrint Archive, Paper 2022/1530},
  year         = {2022},
  note         = {\url{https://eprint.iacr.org/2022/1530}},
  }
 @inproceedings{bcms,
  author    = {B. B{\"{u}}nz and
               A. Chiesa and
               P. Mishra and
               N. Spooner},
  title     = {Recursive Proof Composition from Accumulation Schemes},
  booktitle = {Theory of Cryptography - 18th International Conference, {TCC} 2020,
               Durham, NC, USA, November 16-19, 2020, Proceedings, Part {II}},
  series    = {Lecture Notes in Computer Science},
  volume    = {12551},
  pages     = {1--18},
  publisher = {Springer},
  year      = {2020},
  url       = {https://doi.org/10.1007/978-3-030-64378-2\_1}, 
}
@misc{bplusplus,
  author       = {Liam Eagen},
  title        = {Bulletproofs++},
  howpublished = {Cryptology ePrint Archive, Paper 2022/510},
  year         = {2022},
  note         = {\url{https://eprint.iacr.org/2022/510}},
}