Mixing by Zero-Knowledge Proof