Optimal Security Proofs for PSS and Other Signature Schemes
Secure hash-and-sign signatures without the random oracle