Gregory Neven Nigel P. Smart Bogdan Warinschi Hash function requirements for Schnorr signatures. 69-87 2009 3 J. Math. Cryptol. 1 https://doi.org/10.1515/JMC.2009.004 db/journals/jmc/jmc3.html#NevenSW09