Zero knowledge in the random oracle model, revisited
Universally composable security: a new paradigm for cryptographic protocols