cross-posted from: https://slrpnk.net/post/13941188

The paper is here