Universal accumulators with efficient nonmembership proofs
Secure hash-and-sign signatures without the random oracle