Zero-knowledge for finite field arithmetic. Or: Can zero-knowledge be for free (1998)

by R Cramer, I Damg̊ard
Venue:In CRYPTO 1998