[1]Goldwasser S, Micali S, Rackoff C. The knowledge complexity of interactive proof systems[C] Proc of the 17th ACM Symp on Theory of Computing. New York: ACM, 1985: 291304[2]Goldwasser S, Micali S, Rackoff C. The knowledge complexity of interactive proof systems[J]. SIAM Journal on Computing, 1989,18(1): 186208[3]Feige U, Fiat A, Shamir A. Zeroknowledge proof of identity[J]. Proc of Annual ACM Symp on Theory of Computing, 1988, 1(2): 7794 [4]Blum M, Feldman P, Micali S. Noninteractive zeroknowledge and its applications[C] Proc of the 20th Annual ACM Symp on Theory of Computing. New York: ACM,1988: 103112[5]Blum M, Santis A D, Micali S, et al. Noninteractive zeroknowledge[J]. SIAM Journal on Computing, 1991, 20(6): 10841118[6]陈华平, 范修斌, 吕述望. CFL专利:中国[P]. 20160217[7]冯登国. 安全协议——理论与实践[M]. 北京: 清华大学出版社, 2011[8]Rabin M. Probabilistic algorithm for testing primality[J]. Journal of Number Theory, 1980, 12(1): 128138[9]Santis A D, Persiano G. The power of preprocessing in zeroknowledge proofs of knowledge[J]. Journal of Cryptology, 1996, 9(3): 129148[10] Santis A D, Persiano G. Zeroknowledge proofs of knowledge without interaction[J]. IEEE Symp on Foundations of Computer Science,1992, 1(2): 427436