Security of interactive DSA batch verification

Authors:

Abstract
The authors show that the interactive DSA batch transaction protocol proposed by Naccache et al. at Eurocrypt'94 is not secure.