Publicly verifiable function secret sharing