v. U. Maurer, “Towards the equivalence of breaking the Diffie-Hellman protocol and computing discrete logarithms”, Advances in Cryptology - Crypto ’94, Springer-Verlag (1994), p. 271-281.