Fiat-Shamir with aborts: Applications to lattice and factoring-based signatures
Polynomial-Time Algorithms for Prime Factorization and Discrete Logarithms on a Quantum Computer