Zero knowledge in the random oracle model, revisited
How to Prove Yourself: Practical Solutions to Identification and Signature Problems