Paillier's trapdoor function hides up to \(O(n)\) bits
scientific article; zbMATH DE number 1887498