Okamoto Beats Schnorr: On the Provable Security of Multi-Signatures
Threshold Signatures, Multisignatures and Blind Signatures Based on the Gap-Diffie-Hellman-Group Signature Scheme