Hash function requirements for Schnorr signatures
Universal one-way hash functions and their cryptographic applications