2003-09-09 00:55:12 http://crypto.stanford.edu/~pgolle/papers/return.ps