Source: https://eprint.iacr.org/2017/1236.pdf