A concrete treatment of Fiat-Shamir signatures in the quantum random-oracle model
scientific article; zbMATH DE number 6904624