Ilya Mironov Collision-Resistant No More: Hash-and-Sign Paradigm Revisited. 140-156 2006 conf/pkc/2006 Public Key Cryptography http://dx.doi.org/10.1007/11745853_10 db/conf/pkc/pkc2006.html#Mironov06