Holger Petersen Markus Michels On Signature Schemes with Threshold Verification Detecting Malicious Verifiers. 67-78 1997 conf/spw/1997 Security Protocols Workshop db/conf/spw/spw1997.html#PetersenM97