Optimal Security Proofs for Full Domain Hash, Revisited
S. Kakvi, E. Kiltz, Journal of Cryptology (2017) 276–306.