A signature scheme with simple security proofs and linearity properties enabling aggregation and advanced constructions.