Universally verifiable mix-net with verification work independent of the number of mix-servers