S. Dobson, S. Galbraith, and B. Smith, “Trustless unknown-order groups”, mathcryptology, vol. 1, no. 2, pp. 25–39, Mar. 2022.