On the Existence of 3-Round Zero-Knowledge Protocols
Definitions and properties of zero-knowledge proof systems