Hash function requirements for Schnorr signatures
Efficient Identification and Signatures for Smart Cards