Cryptology ePrint Archive: Report 2015/169
Available versions in chronological order
20150227:223316 (posted 27-Feb-2015 22:33:16 UTC)
Short Schnorr signatures require a hash function with more than just random-prefix resistance
Daniel R. L. Brown
[
Cryptology ePrint archive
]