Algebraic MACs and Keyed-Verification Anonymous Credentials
Signature schemes and anonymous credentials from bilinear maps