Schnorr Signatures are Tightly Secure in the ROM Under a Non-interactive Assumption.

Gavin Cho, Georg Fuchsbauer, Adam O'Neill, Marek Sefranek

Browse the full CRYPTO paper archive.