Hash function requirements for Schnorr signaturesGregory NevenNigel P. Smartet al.2009Journal of Mathematical Cryptology