Efficient signatures on randomizable ciphertexts
scientific article; zbMATH DE number 7633669