Multirecipient Encryption Schemes: How to Save on Bandwidth and Computation Without Sacrificing Security. - Bellare, Mihir; Boldyreva, Alexandra; Kurosawa, Kaoru; Staddon, Jessica (IEEE Trans. Inf. Theory, 2007)