Asymmetric subversion attacks on signature schemes
scientific article; zbMATH DE number 6944255