ByNobleID
    Selectively unforgeable but existentially forgeable signature schemes and applications | NobleID