Source: https://eprint.iacr.org/2016/086.pdf