Modelling, Design and Analysis:Interim report

First iteration of a NIZK shuffle proof. Describes the shuffle protocol that may be used in implementation within WP5; Integrates robustness into efficient mix-net designs and decryption mixes; proposes robust definitions of mix-nets as differentially private mechanisms