Robuta

https://researchportal.ip-paris.fr/fr/publications/tight-and-optimal-reductions-for-signatures-based-on-average-trap/ Tight and Optimal Reductions for Signatures Based on Average Trapdoor Preimage Sampleable Functions...