https://1library.net/document/zgxnll8q-simpler-efficient-group-signatures-lattices.html