Lattice-Based Zero-Knowledge Proofs and Applications: Shorter, Simpler, and More GeneralVadim LyubashevskyNgoc Khanh Nguyenet al.2022CRYPTO 2022