Batch verification of short signaturesJan CamenischSusan Hohenbergeret al.2011Journal of CryptologyPaper