Ong-Schnorr-Shamir signature scheme