Cramer-Shoup signature scheme