Compact E-Cash
Signature schemes and anonymous credentials from bilinear maps