Amortization with fewer equations for proving knowledge of small secrets
scientific article; zbMATH DE number 6798807