SPB or GPB.

Published in: IACR Cryptol. ePrint Arch. (2019)