Quasi-Efficient Revocation of Group Signatures