The exact security of digital signatures: How to sign with rsa and rabin (1996)

by M Bellare, P Rogaway
Venue:In Advances in Cryptology - EUROCRYPT'96