Full threadLoranubi·If I am not mistaken, https://eprint.iacr.org/2019/1126 talks about this.View on HN