3 ms·

Haskell implementation of the protocol presented by Maller M., Bowe S., Kohlweiss M. and Meiklejohn S.