Journal: J. Cryptology