G-Merkle: a hash-based group signature scheme from standard assumptions
scientific article; zbMATH DE number 6893064