Efficient Ring Signatures in the Standard Model