Mihir Bellare Chanathip Namprempre David Pointcheval Michael Semanko The One-More-RSA-Inversion Problems and the Security of Chaum's Blind Signature Scheme. 185-215 2003 16 J. Cryptology 3 http://dx.doi.org/10.1007/s00145-002-0120-1 db/journals/joc/joc16.html#BellareNPS03