Secure hash-and-sign signatures without the random oracle
The Exact Security of Digital Signatures-How to Sign with RSA and Rabin