cryptographic schemes based on elliptic curve pairings .
a key recovery attack on discrete log - based schemes using a prime order subgroupp .