Simple Three-Round Multiparty Schnorr Signing with Full Simulatability 2022 Y. Lindell. Cryptology ePrint Archive: Report 2022/374, 2022. PDF