Message recovery for signature schemes based on the discrete logarithm problem (1996)
Nyberg Kaisa , Rueppel Rainer A.