Hash function requirements for Schnorr signatures
A digital signature scheme secure against adaptive chosen-message attacks