ffi cient and Verifiable Shu ffl ing and Shu ffl e-Decryption