%% You should probably cite draft-irtf-cfrg-voprf instead of this I-D.
@techreport{sullivan-cfrg-voprf-00,
    number =    {draft-sullivan-cfrg-voprf-00},
    type =      {Internet-Draft},
    institution =   {Internet Engineering Task Force},
    publisher = {Internet Engineering Task Force},
    note =      {Work in Progress},
    url =       {https://datatracker.ietf.org/doc/draft-sullivan-cfrg-voprf/00/},
    author =    {Nick Sullivan and Christopher A. Wood},
    title =     {{Verifiable Oblivious Pseudorandom Functions (VOPRFs)}},
    pagetotal = 16,
    year =      2018,
    month =     mar,
    day =       5,
    abstract =  {A Verifiable Oblivious Pseudorandom Function (VOPRF) is a two-party protocol for computing the output of a PRF that is symmetrically verifiable. In summary, the PRF key holder learns nothing of the input while simultaneously providing proof that its private key was used during execution. VOPRFs are useful for computing one-time unlinkable tokens that are verifiable by secret key holders. This document specifies a VOPRF construction based on Elliptic Curves.},
}