Ian F. Blake, Aldar C.-F. Chan: Conditionally Verifiable Signature. INDOCRYPT 2006: 206-220