Public-coin 3-round zero-knowledge from learning with errors and keyless multi-collision-resistant hash
scientific article; zbMATH DE number 7694627