The one-more-RSAinversion problems and the security of Chaum's blind signature scheme (2002)

by M Bellare, C Namprempre, D Pointcheval, M Semanko
Venue:In Financial Cryptography 2002, Lecture Notes in Computer Science