Probabilistic signature scheme