Optimal Security Proofs for PSS and Other Signature Schemes
Public-Key Cryptosystems Based on Composite Degree Residuosity Classes