https://mathoverflow.net/questions/22624/example-of-a-good-zero-knowledge-proof