Secure hash-and-sign signatures without the random oracle
A digital signature scheme secure against adaptive chosen-message attacks