A digital multisignature scheme based on the Fiat-Shamir scheme”, Asiacrypt 91 (1991)

by K Ohta, T Okamoto