Message recovery for signature schemes based on the discrete logarithm problem (1995)
Nyberg Kaisa , Rueppel Rainer A.