Compact zero-knowledge proofs of small Hamming weight
scientific article; zbMATH DE number 6876141