Trapdoor functions from the computational Diffie-Hellman assumption
scientific article; zbMATH DE number 6943911