R. Cramer and I. B. Damgård, “Secure Signature Schemes Based on Interactive Protocols”, BRICS, vol. 1, no. 29, Sep. 1994.