1

Analysing the HPKE Standard
Lattice-Based Blind Signatures, Revisited