Privacy-preserving authentication with zero-knowledge proofs