An efficient lattice-based multisignature scheme with applications to bitcoins
scientific article; zbMATH DE number 6966610