Shorter Lattice-Based Zero-Knowledge Proofs for the Correctness of a Shuffle | Publicación