Source: https://eprint.iacr.org/2018/1046.pdf