Núria Costa, Ramiro Martínez, Paz Morillo: Lattice-Based Proof of a Shuffle. Financial Cryptography Workshops 2019: 330-346