Design and analysis of practical public-key encryption schemes secure against adaptive chosen ciphertext attack
Public-Key Cryptosystems Based on Composite Degree Residuosity Classes