Practical Product Proofs for Lattice CommitmentsThomas AttemaVadim Lyubashevskyet al.2020CRYPTO 2020Conference paper