Non-Interactive Zero-Knowledge from Homomorphic Encryption
Public-Key Cryptosystems Based on Composite Degree Residuosity Classes