On Tight Security Proofs for Schnorr Signatures appears at the Journal of Cryptology