Fiat-Shamir with aborts: Applications to lattice and factoring-based signatures
How to Prove Yourself: Practical Solutions to Identification and Signature Problems