Crytanalysis of DES with a Reduced Number of Rounds: Sequences of Linear Factors in Block Ciphers. - David Chaum; Jan-Hendrik Evertse (CRYPTO, 1985)

A Secure and Privacy-protecting Protocol for Transmitting Personal Information Between Organizations. - David Chaum; Jan-Hendrik Evertse (CRYPTO, 1986)

Demonstrating Possession of a Discrete Logarithm Without Revealing It. - David Chaum; Jan-Hendrik Evertse; Jeroen van de Graaf; René Peralta 001 (CRYPTO, 1986)

An Improved Protocol for Demonstrating Possession of Discrete Logarithms and Some Generalizations. - David Chaum; Jan-Hendrik Evertse; Jeroen van de Graaf (EUROCRYPT, 1987)

Linear Structures in Blockciphers. - Jan-Hendrik Evertse (EUROCRYPT, 1987)

Which New RSA Signatures Can Be Computed From Some Given RSA Signatures? - Jan-Hendrik Evertse; Eugène van Heyst (EUROCRYPT, 1990)

Which new RSA Signatures can be Computed from RSA Signatures, Obtained in a Specific Interactive Protocol? - Jan-Hendrik Evertse; Eugène van Heyst (EUROCRYPT, 1992)

Which New RSA-Signatures Can be Computed from Certain Given RSA-Signatures? - Jan-Hendrik Evertse; Eugène van Heyst (J. Cryptol., 1992)